Forums / Installing on a Linux/Unix Server / SSL Enabled but product pages not under https

SSL Enabled but product pages not under https

Locked

Started by divalyn on 13 May 2008, 1:13 AM · Views: 2,359

Results 1 to 8 of 8
This thread is locked. New replies are disabled.
13 May 2008, 1:13 AM
#1
divalyn avatar

divalyn

New Zenner

Join Date:
Apr 2008
Posts:
5
Plugin Contributions:
0

SSL Enabled but product pages not under https

Hi
I am new to this forum and also to ZC. I just followed the instructions for installing SSL on my server and enabling in ZC. I then had a problem with logging into Admin but I think I fixed that. Now, when I browse to my site at https://www.store.mydomain.com any product I select is not under the https:// rather the https://. Is that normal or do I have to change anything else?
Thanks for the help!

13 May 2008, 1:25 AM
#2
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,511
Plugin Contributions:
176

Re: SSL Enabled but product pages not under https

That's normal.

Why do you want your products under SSL?

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

13 May 2008, 2:10 AM
#3
divalyn avatar

divalyn

New Zenner

Join Date:
Apr 2008
Posts:
5
Plugin Contributions:
0

Re: SSL Enabled but product pages not under https

Thanks. Just wasn't sure if I had set it up correctly. I'm also using only Paypal to process CCs so i guess from what I read I really don't even need the SSL anyway. :smile:

13 May 2008, 2:16 AM
#4
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,511
Plugin Contributions:
176

Re: SSL Enabled but product pages not under https

Whether or not you collect CC data on your site is somewhat irrelevant. You do collect some sort of customer information, right? Thus you should be using SSL for customer-sensitive data.
And, if you have SSL properly configured on your Zen Cart site, it takes care of protecting sensitive pages automatically.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

13 May 2008, 12:46 PM
#5
divalyn avatar

divalyn

New Zenner

Join Date:
Apr 2008
Posts:
5
Plugin Contributions:
0

Re: SSL Enabled but product pages not under https

how do i know if SSL is properly configured. It is i the first time setting up both ZC and SSL. the url is https://www.store.clvideo.com if you you have a chance to take a look.

thanks.

13 May 2008, 3:34 PM
#6
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,511
Plugin Contributions:
176

Re: SSL Enabled but product pages not under https

It seems you've chosen to use a self-signed SSL certificate ... which, while it will protect customer data, may prove confusing to customers. Many customers have their browsers set to show SSL warnings when self-signed certificates are used.
You should get an SSL certificate from a trusted authority ... which means you'll have to pay for it.

But your general Zen Cart setup for SSL appears to be working.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

13 May 2008, 3:44 PM
#7
divalyn avatar

divalyn

New Zenner

Join Date:
Apr 2008
Posts:
5
Plugin Contributions:
0

Re: SSL Enabled but product pages not under https

DrByte:

It seems you've chosen to use a self-signed SSL certificate ... which, while it will protect customer data, may prove confusing to customers. Many customers have their browsers set to show SSL warnings when self-signed certificates are used.
You should get an SSL certificate from a trusted authority ... which means you'll have to pay for it.

But your general Zen Cart setup for SSL appears to be working.

I did buy the SSL from godaddy (starfieldtech is the vendor). I didn't really mean for it to be selfsigned and quite frankly would not have known the difference except that I didn't get any prompts or notices that it is a self-signed cert. Should I have gotten something different and if so, is it worth it now to revoke the ssl and purchase and install a different one?

14 May 2008, 2:17 PM
#8
website_rob avatar

website_rob

Inactive

Join Date:
Oct 2006
Location:
Alberta, Canada
Posts:
4,572
Plugin Contributions:
0

Re: SSL Enabled but product pages not under https

There are a few issues that all need to be dealt with.

You need a Dedicated IP address.

  • current IP for your Domain name resolves to another Domain name

Choose your SSL Cert name carefully.

  • might be better to get a Cert in the name of 'clvideo.com' so you can use it anywhere within your site
  • not sure why you are using a Subdomain but if you do use one, you do not need 'www'
  • a URL of shop.clvideo.com will also work as clvideo.com/shop

Get your Hoster to help with the Cert install.

  • GoDaddy requires the use of a file (bundle.crt) that must be manually installed on the Server

The learning is in the doing.

Potent Products