Hi!

I just today got an SSL Certificate but I think I boobed :(

I got it for my domain name without the www. so just eg: mysite.com

Is this going to cause me grief with Zen giving warning messages as in `The certificate is issued to mysite.com and not https://www.mysite.com'.

I think they said I could get it reissued within 7 days if it didn't work correctly - so should I try and get it reissued with www. ?

Thanks
Ernie

esugrue:

I think they said I could get it reissued within 7 days if it didn't work correctly - so should I try and get it reissued with www. ?
Yes. If you are using https://www.example.com then the SSL cert needs to be for https://www.example.com rather than example.com . If they don't match your customers will see a warning message and it will put them off buying from you.

Regards,
Christian.

Bummer:

Since most people still put www. and advertise that way they'll get a warning message, that's what I thought.

I'll try and see if I can get it reissued

Ernie

If you don't want to use the www then you don't have to. If you put the URL of the site without the www in your configure.php files then Zen Cart will create all of its links without the www. You should probably also use a .htaccess file to redirect search engines from the www version to the non-www version. A quick look through the Search Engine section of the forum will turn up a post on how to do that.

Regards,
Christian.

Hi Christian:

Thanks for the info, I may leave it then and for future ones make sure I have the www.

I will look into the htaccess file in the morning (after midnight here)

Thanks for your help

Ernie

esugrue:

Hi Christian:

Thanks for the info, I may leave it then and for future ones make sure I have the www.

I will look into the htaccess file in the morning (after midnight here)

Thanks for your help

Ernie

If you just bought it today speak to the vender who sold it to you. You should be able to get it changed.

I did ask them if they would reissue it with the www. and they said that they wouldn't do it I would have to cancel and get a new one.

Which was not a lot of help.

with or without www doesnt make a whole lot different at all.
I use it with www, so in my htaccess i tell my server to redirect all access to the one without www to the one with it. Problem solved.

Hi!

Can someone check that it works OK and all. Instead of htaccess I simply did a redirect to the sans www. site (I will do it via htaccess eventually, when I work out how exactly :-))

I've added the Credit Card payment module and a sidebox which says the site is secured (I added Checkout and Payment pages) in case someone says but the product page isn't.

Also can you check on speed - the site has just been moved to an Australian server since my customers are all Australian and I have a feeling from the US it will load very slow, so can some people check it and let me know.

I know it loads pretty fast from here in Australia (well a LOT faster than it did when hosted in the US!).

Any problems, let me know!

Cheers
Ernie

Options +FollowSymLinks
RewriteEngine On

# Block access to .htaccess
RewriteRule ^\.htaccess$ - [F]

RewriteCond %{HTTP_HOST} !^www [NC]
RewriteCond %{SERVER_PORT} !^443
RewriteRule ^(.*)$ http://www.%{HTTP_HOST}/$1 [R=301,L]

RewriteCond %{HTTP_HOST} !^www [NC]
RewriteCond %{SERVER_PORT} ^443
RewriteRule ^(.*)$ https://www.%{HTTP_HOST}/$1 [R=301,L]

Cool!

Thank you for that I will change it tonight!

Ernie

Hi esgrue,

I saw your posting about your SSL issue. I just wanted to point out that a single SSL Certificate can actually be issued to both the www and non-www site - and all GlobalSign certs actually do this by default. We take advantage of the fact that we can insert the non-www variation of the domain name into the Subject Alternative Names field wihin the certificate, and as browsers are happy to use either the primary Common Name or the Subject Alternative Name fields to verify that the certificate is being used on the same site, you can avoid any name conflict issues.

Just an alternative to coding updates...

Regards,

Steve Waite

yellow1912:

Options +FollowSymLinks
RewriteEngine On

Block access to .htaccess

RewriteRule ^.htaccess$ - [F]

RewriteCond %{HTTP_HOST} !^www [NC]
RewriteCond %{SERVER_PORT} !^443
RewriteRule ^(.*)$ http://www.%{HTTP_HOST}/$1 [R=301,L]

RewriteCond %{HTTP_HOST} !^www [NC]
RewriteCond %{SERVER_PORT} ^443
RewriteRule ^(.*)$ https://www.%{HTTP_HOST}/$1 [R=301,L]

I'm sorry I'm so thick but I think that says the opposite of what I need.

If a customer types: <http://www.mysite> - I need the .htaccess to rewrite it to <http://mysite>.  (ie: remove the www.)

What do I change above to do that? 

Thanks
Ernie

esugrue:

If a customer types: http://www.mysite - I need the .htaccess to rewrite it to http://mysite. (ie: remove the www.)

What do I change above to do that?
I think what you need is...

Options +FollowSymLinks
RewriteEngine On

# Block access to .htaccess
RewriteRule ^\.htaccess$ - [F]

RewriteCond %{HTTP_HOST} !^mysite.com$ [NC]
RewriteCond %{SERVER_PORT} !^443
RewriteRule ^(.*)$ http://mysite.com/$1 [R=301,L]

RewriteCond %{HTTP_HOST} !^mysite.com$ [NC]
RewriteCond %{SERVER_PORT} ^443
RewriteRule ^(.*)$ https://mysite.com/$1 [R=301,L]

Hope that helps.

Regards,
Christian.

Ok I had a similar problem..so I did the htaccess file after I did that I couldn't log into admin and no one could put items in their cart..so I had to change my htaccess to an empty file until I can fix this issue
Posted via Mobile Device