Site won't switch into SSL mode - using servage.net hosting

Just installed Zen but I'm getting a red line through my padlock for SSL, I assume that means I've got external links to some things, all I've done is install Zen, a template and a couple of mods and SSL not got any stock in it yet or banners.

Can anyone who understands how SSL works tell me what links are causing the problems and what files they are located in.

If I understand it properly I just need to remove the http:// etc. and internally link it...

if that makes sense to anyone :)

the site is https://secure.gothicmagic.co.uk

thanks in advance to anyone that can help, I've never used SSL before so I'm in the dark :oops:

Your configure.php files may need attention - there are important configurations in these files you need to set.

there are TWO configure.php files :-

includes/configure.php
admin/includes/configure.php

I checked both those files for any instances of src="http:// last night and didn't find any, perhaps my sleepy eyes have let me down... or is it not just "src=" lines that I need to look at?

Thanks :)

in the config files it's really just the parts like this:

define('HTTP_SERVER', 'http://gothicmagic.co.uk');
define('HTTPS_SERVER', 'https://secure.gothicmagic.co.uk');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', true);

that need chaning I think, and they are done, SSL is working (perfectly in the admin section) but I'm getting unauthenticated content errors on the shop front

Badvoc:

I checked both those files for any instances of src="http:// last night and didn't find any, perhaps my sleepy eyes have let me down... or is it not just "src=" lines that I need to look at?

Thanks :)

:huh: Not sure what you tried to do, but these are php files and you need to change some of the the DEFINE settings.

You should be looking for the following:-

// Define the webserver and path parameters
  // HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com
  // HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com
  define('HTTP_SERVER', 'http://www.YOUR-DOMAIN-HERE');
  define('HTTPS_SERVER', 'https://YOUR-PATH-TO-SECURE-WEBSERVER-HERE');

  // Use secure webserver for checkout procedure?
  define('ENABLE_SSL', 'true');

I don't need to change those bits mate that's already done, and ssl does exist

The way or place you have this installed is the issue....

The logo is at:

http://gothicmagic.co.uk/includes/templates/lavender/images/logo.gif

The site url and SSL cert is at:

http://secure.gothicmagic.co.uk/

Not sure what you have done here but this is the problem

I just followed the instructions for everything to the letter :)

I don't want the whole site to run in SSL just logins etc. i.e. when the customer has to input info

So all images displayed on the site have to have a secure address? or is it just the logo?

I'm confused lol :)

I installed Zen then the template, then added SSL in that order.

what file is that path in?

re-read my post...

The logo states that it is at gothicmagic.co.uk but your site url loads from secure.gothicmagic.co.uk

Your SSL Cert is issued to secure.gothicmagic.co.uk

It is the

gothicmagic.co.uk
secure.gothicmagic.co.uk

thing that is causing the broken lock

Have you cleared your browser cache and cookies?
Do you have a link to a page that is having a particular problem?

DrByte:

Have you cleared your browser cache and cookies?
Do you have a link to a page that is having a particular problem?

everything is working fine in the admin panel SSL is working

if I go to the site http://gothicmagic.co.uk and select login it will go to http://secure.gothicmagic.co.uk (to protect the users input) at that point the SSL padlock appears but has a red line through it.

I'll clear cookies and cache now.

I'm pretty sure it's the logo.gif as after clearing cookies and cache it was an ok padlock until it loaded the logo.gif, I just don't know anything about Zen or SSL, and I'm sure Kobra is right above but I don't understand what I need to do, I'm a bit thick me :)

Who is your hosting company?

If it's network solutions, you're out of luck ... they've got a perfectly consistent bad track record in this arena.

servage.net

Have you installed any addons that would have changed or customized these files? Or made any manual changes to these files?

• /includes/init_includes/init_file_db_names.php
• /includes/init_includes/overrides/init_file_db_names.php
• /includes/templates/ANY_TEMPLATE/common/html_header.php

I haven't changed any of them manually, I've installed the Lavender template which came with better categories mod

if I go to the site http://gothicmagic.co.uk and select login it will go to http://secure.gothicmagic.co.uk (to protect the users input) at that point the SSL padlock appears but has a red line through it.
As he is navigating to secure.gothicmagic.co.uk and he has the base install at gothicmagic.co.uk and the logo image there also - he gets the broken lock...

You did not need to move to secure.gothicmagic.co.uk to have this function but as your cert is now issued to it you could move the complete install to secure.gothicmagic.co.uk or get another cert issued to gothicmagic.co.uk or possibly have it re-keyed??

No, the problem is that even though the link correctly starts in the browser as
https://secure.gothicmagic.co.uk/index.php?main_page=login
... the cart is unable to accurately detect that the page is served as SSL, and is therefore treating it as non-SSL internally, as evidenced by View Source:```

DrByte I see what you are referring to but also click the lock and see:

Connection Partially Encrypted
Parts of the page you are viewing were not encrypted before being transmitted over the Internet.
Information sent over the Internet without encryption can be seen by other people while it is in transit.
Probably more than one issue...

I'm not sure what to do now....

since I haven't put any stock or anything in yet perhaps the easiest route would be to delete and re-install Zen in https://secure.gothicmagic.co.uk

but then I guess that would have to be my shop url which isn't very nice.

But in short it looks like I cocked it up when I bought my SSL cert, it suggested secure in front of my url by default and I just went with it, live and learn I guess.s

kobra:

I see what you are referring to but also click the lock and see:

Connection Partially Encrypted
Parts of the page you are viewing were not encrypted before being transmitted over the Internet.
Information sent over the Internet without encryption can be seen by other people while it is in transit.
Probably more than one issue...Right ... the non-encrypted components would be everything that's referenced with a relative path, such as images and stylesheets, since they're all based from the base href when they're not using an absolute URL.

Which means it all still boils down to the server not giving enough info about the fact that the page is running SSL, so Zen Cart cannot pick up on that fact and switch into the proper mode.