How do I install an SSL certificate?

[mad_dexter]

I have just purchased an SSL certificate from our web hosting company.

I am a newbie as far as this is concerned so could anyone tell me what is involved in setting it up and what files need editing?

I understand from the hosting company that you can apply the SSL to all of the site or just payment. What are the pro's and con's and does anyone have a feel what do the majority do?

Thanks.

[ridexbuilder]

...setting it up...

Refer to your hosting provider.

I understand from the hosting company that you can apply the SSL to all of the site or just payment.

Dodgy hosting company that even suggests to SSL the whole site!

Look at your config.php files - pretty obvious where to put the SSL stuff - the line with https:
You are advised to also use https for all of admin - see its' own config.php

   define('HTTPS_CATALOG_SERVER', 'https://xxxxxx.com'); 
  define('ENABLE_SSL_CATALOG', 'true'); 
  

For Admin:

   define('HTTP_CATALOG_SERVER', 'https://xxxx');
  define('HTTPS_CATALOG_SERVER', 'https://xxxx');
  define('ENABLE_SSL_CATALOG', 'true'); 
  

[mad_dexter]

The company did say there would be overheads if the whole site was SSL'd.

Does it matter if the SSL certificate is http://domain.com or http://www.domain.com?

[ridexbuilder]

Does it matter if the SSL certificate is http://domain.com or http://www.domain.com?

That is not an osCMax specific question but a general SSL one - Google is your friend.
Arguments for/against probably and I know my preference and what I recommend to my clients. In any case, given that you already have your SSL, the decision has been made already.

[mad_dexter]

Thanks, and as you say the decision has been made, but I just wanted to make sure either was applicable.

Thing is I have edited the config.php files with the SSL address but the SSL does not seem to work (ie padlock icon not appearing).

[mad_dexter]

Damn it must be getting late. I've just realised the default text for the SSL server in config.php didn't have https: ie

define('HTTPS_CATALOG_SERVER', 'http://');

All sorted now. Thanks very much for your help

[ridexbuilder]

Good that it's working.

[mad_dexter]

One last question about the Admin SSL...

Do I actually have to type https://www.domain/catalog/admin to log on securely to Admin?
If I type www.domain.catalog/admin I don't get redirected to SSL as I do with catalog.

[ridexbuilder]

Eh, try the line above in the admin. config.

[mad_dexter]

No, did that. Maybe I have to wait for my session to expire and log on again?