What do i need to do to make my SSL certificate work?

[dejanlesi]

Hello guys!

I am not a real techie and i have no idea how to setup my newly bought SSL certificate.. I have bought it from Godaddy and Hostgator installed it.. Which changes do i need to make now so that my store will run on https instead of http?

Thank you for your help guys, i am really stuck here :S

[dejanlesi]

I found on the forum that i should change my configure.php file from this:
// * DIR_FS_* = Filesystem directories (local/physical)
// * DIR_WS_* = Webserver directories (virtual/URL)
define('HTTP_SERVER', 'http://www.nannycamz.com');
define('HTTPS_SERVER', 'http://www.nannycamz.com');
define('ENABLE_SSL', false);
define('HTTP_COOKIE_DOMAIN', 'www.nannycamz.com');
define('HTTPS_COOKIE_DOMAIN', 'www.nannycamz.com');
define('HTTP_COOKIE_PATH', '/');
define('HTTPS_COOKIE_PATH', '/');
define('DIR_WS_HTTP_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', '/');
define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

To this:
// Define the webserver and path parameters
// * DIR_FS_* = Filesystem directories (local/physical)
// * DIR_WS_* = Webserver directories (virtual/URL)
define('HTTP_SERVER', 'http://www.yourserver.com'); // eg, cPanel® - should not be empty for productive servers
define('HTTPS_SERVER', 'https://www.yourserver.com'); // eg, https://localhost - should not be empty for productive servers
define('ENABLE_SSL', true); // secure webserver for checkout procedure?
define('HTTP_COOKIE_DOMAIN', 'www.yourserver.com');
define('HTTPS_COOKIE_DOMAIN', 'www.yourserver.com');
define('HTTP_COOKIE_PATH', '/catalog/');
define('HTTPS_COOKIE_PATH', '/catalog/');
define('DIR_WS_HTTP_CATALOG', '/catalog/');
define('DIR_WS_HTTPS_CATALOG', '/catalog/');
define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');


But when i make the changes it says that a fatal error occured and the changes dont get saved..

[ridexbuilder]

Look in the 2 config.php files.

[dejanlesi]

Yup i found it on the forum and changed both the configure.php files buuut looks like there is still some html that is not https.. I changed all the products and everything into https..

Could it be the cookies?

I want to change everything because currently my site shows a padlock with an exclamation and that is not good for potential customers

[michael_s]

Quick lesson on SSL:

Do NOT encrypt any pages that do not specifically require it. Your search engine rankings will suffer. Your web site performance will suffer. Your sales will suffer.

osCMax is designed to automatically encrypt the pages that need it. All you have to do is set the ssl to true, and then define the HTTPS_SERVER and HTTPS_COOKIE_DOMAIN properly.

You should only be encrypting pages where sensitive or customer information is collected/transmitted. Product pages should never be encrypted as there is nothing that needs to be encrypted on those pages. It is simply a waste of server resources and end user time.

[dejanlesi]

Ok, but then the SSL does not show properly.. It show a flaw, like i said a padlock with an exclamation.. Do you think that costumers wont mind? Do you have any stores that work this way?

Thanks

[dejanlesi]

I have set it like you said but this looks a bit weird now.. Take a look at my NannyCams

When you go to the secured part of the site(click create an account) you get a non verified SSL..

Do you have your stores made like this as well?

[michael_s]

you have hardcoded some non-ssl image or javascript sources.

A quick look at the source code reveals:

<script language="javascript" type="text/javascript"><!--
function session_win() {
  window.open("http://www.nannycamz.com/info_shopping_cart.php?osCsid=931c8f873ed67d39e8659fc82f1f792d","info_shopping_cart","height=460,width=430,toolbar=no,statusbar=no,scrollbars=yes").focus();
}

and

<img style="width: 750px; height: 57px;" alt="" src="http://www.nannycamz.com/images/payments.jpg">

You cannot hard code a HTTP source. It must ALWAYS be coded as a relative path to the image/src.



//--></script>

[JohnW]

You definitely don't want any errors that could scare off a customer or lower your credibility.
Your problem is you are displaying non ssl images on your ssl pages. Here is your culprit
http://www.nannycamz.com/images/payments.jpg
This is most likely due to you setting this as an absolute link, which you don't want to do. Look at how your other images are displayed and copy that. For instance like this

<img src="<?php echo DIR_WS_IMAGES .'payments.jpg' ?>" alt="accepted cards"> 

or

EDIT this keeps getting changed by forum software

I think that is your only issue but if you see this more look for this problem.

FYI, I found this using Firefox browser and clicking on page info on your create account page.

[JohnW]

I was looking at your site a little more just to see what all you sold and I noticed your small images are being resized to distort their height and width aspect ratios. You really don't want to set your store to adjust both height and width for this reason. Over time I've found it best to try and make a thumb image that is a uniform height and not have the software adjust it. Google's page speed and Yslow also recommend not manipulating image sizes in html.