SSL Issue

After installing MAX 1.5 with SSL enabled in a configuration where http and https are on different domains and using a shared SSL certificate.

Upon attempting to log in, send forgotten password or create a new account. The process fails. On login and password attempts it says it can't match the email address. When attemping to create a new account after filling in and submitting all info it returns you back to a blank form.

All the above attemps are redirected to the https site. correctly (I do get a error saying the names dont match) and the lock appears and I have no issues with images so I'm thinking that I have the configure.php files set up correctly.

If I do clean install in https domain with SSL turned off every works fine. And like wise everything works ok from the http doman with SSL turned off.

With SSL enabled the problem surfaces and my IE 6 browser seem to hang frequently when using back button and refreshing pages.

I'm thinking I have some sort of session issue. I have sessions set to be stored in database. Recreate session is enabled also. all other session options are disabled.

I've also noticed that when things work correctly. While trying to login, upon typing the first letter of email address I get the dropdown with previously typed email addresses and when it doesnt work I dont.

I'm stumped...any of you gurus out there have any advice?

Many thanks in Advance,

Lonnie

[lvose]

Lonnie

[Bec]

I think I'm having the same problem...is this a bug?

[michael_s]

Bec, it is only a bug if having your configure.php setup incorrectly qualifies as a bug.

It's not working because you have something misconfigured, either in the sessions setup, or the configure.php

MS2-MAX has been out for a few months now, and the admin has been stable since September. A good rule of thumb, especially if you are new to osC, if you are having a problem, 99% of the time it is a mistake on your end.

[Bec]

Sigh. Yes, I know. You're right.

I just got so excited when I saw someone else was having the same problem!

Iv'e tried all the combinations of http and https configurations in the configuration files. SSL appears to be working. You go where your supposed to. Just when you get there things don't work.

Where can sessions be configured other that adminpanel? I'll kep lookng.

Thanks

[michael_s]

Guest, sessions are configured in the admin. You have to set the correct combination for your server, then you must also corectly set up configure.php to build the paths. You should also read up on the sessions function at oscommerce.com. There is a long discussion on this, plus deep documentation in the wiki over there.