SSL config in 1.4.7

Quote

Post by vicpug » Thu Jun 03, 2010 7:41 am

I am using a shared SSL url as provided by the hosting company - https://aus32.xxx.com/~username and this is configured in /admin/config.php. All works perfect in Admin - but in user catalog , the Login, Account and Checkout tabs refer to https://www.realsitename.com . It appears that the logic that determines the ssl url in catalog mode simply inserts 's' to get the name and does not go thru the correct logic.

I have searched thru the source without any real joy. Have I misconfigured or is this maybe a bug?

thanks indeed
vicpug
Newbie
Posts
2
Joined
Tue May 25, 2010 7:33 am
Top

Re: SSL config in 1.4.7

Quote

Post by Daniel » Fri Jun 04, 2010 3:49 am

"the ssl url in catalog mode simply inserts 's' to get the name and does not go thru the correct logic."

So your correct logic is is that your site is secured using shared SSL?

yes opencart does not work with shared SSL. Why? because cookies do not work accross multiple domain names.

Shared SSL does not give you or your customer security.

SSL certifcates are very cheap to buy. so buy one!

OpenCart®
Project Owner & Developer.

User avatar
Daniel
Administrator
Posts
5627
Joined
Fri Nov 03, 2006 6:57 pm
Top

Re: SSL config in 1.4.7

Quote

Post by JNeuhoff » Fri Jun 04, 2010 6:48 pm

I think this could be easily fixed by having both a config_url and a config_secure_url for each store and then use it in the index.php like this:

Code: Select all

....
define('HTTP_SERVER', $config->get('config_url'));
define('HTTP_IMAGE', HTTP_SERVER . 'image/');

if ($config->get('config_ssl')) {
	define('HTTPS_SERVER', $config->get('config_secure_url'));
	define('HTTPS_IMAGE', HTTPS_SERVER . 'image/');	
} else {
	define('HTTPS_SERVER', HTTP_SERVER);
	define('HTTPS_IMAGE', HTTP_IMAGE);	
}
....
Maybe Qphoria could add support for a config_secure_url in the upcoming 1.4.8 release?

Export/Import Tool * SpamBot Buster * Unused Images Manager * Instant Option Price Calculator * Number Option * Google Tag Manager * Survey Plus * OpenTwig

User avatar
JNeuhoff
Guru Member
Posts
7491
Joined
Wed Dec 05, 2007 3:38 am
Top

Re: SSL config in 1.4.7

Quote

Post by Qphoria » Fri Jun 04, 2010 8:10 pm

Well that would allow for using a "different" dns as the launchpad for sharedssl support. But there is still the session stuff that would need to be figured out to allow passing sessions between domains. I'll look into it but not til after 1.4.8

Image

User avatar
Qphoria
Administrator
Posts
20056
Joined
Tue Jul 22, 2008 3:02 am
Top

Re: SSL config in 1.4.7

Quote

Post by JNeuhoff » Fri Jun 04, 2010 9:55 pm

Yes, you are right, the session across different domains can be an issue. The solution is probably described here:

http://stackoverflow.com/questions/2440 ... ame-server

But I'd have to try it out. I sometimes use shared SSL for callbacks from payment gateways, e.g. Google Checkout, without any problems.

Export/Import Tool * SpamBot Buster * Unused Images Manager * Instant Option Price Calculator * Number Option * Google Tag Manager * Survey Plus * OpenTwig

User avatar
JNeuhoff
Guru Member
Posts
7491
Joined
Wed Dec 05, 2007 3:38 am
Top

Re: SSL config in 1.4.7

Quote

Post by Qphoria » Fri Jun 04, 2010 10:04 pm

I do agree that shared ssl support does need to be there. Any good cart has it already and we should support just to keep up with the jones'. But it will take a bit of testing. I will look at your link as well for info.
Thanks!

Image

User avatar
Qphoria
Administrator
Posts
20056
Joined
Tue Jul 22, 2008 3:02 am
Top

Re: SSL config in 1.4.7

Quote

Post by Daniel » Mon Jun 07, 2010 1:36 am

if we start putting session ids in urls then google will not parse your web site.

the only other way to do it is get rid of cookies completely and store the session in the db and lock the session to the ip address. not somthing i want to do because i don;t want the session class to have a db dependancy. although it might be possible to have the session stored in the db out side of the session class its self.

but again how much does a ssl cert cost? and why can the person not just buy one.

OpenCart®
Project Owner & Developer.

User avatar
Daniel
Administrator
Posts
5627
Joined
Fri Nov 03, 2006 6:57 pm
Top

Re: SSL config in 1.4.7

Quote

Post by vicpug » Wed Jun 16, 2010 9:42 pm

All the above is valid and correct. Some hosting companies (like the one I am using) only provide a dedicated SSL on their Premium hosting plan( which is not the plan that I am on) - so the overall costs all add up. cheers
vicpug
Newbie
Posts
2
Joined
Tue May 25, 2010 7:33 am
Top

Re: SSL config in 1.4.7

Quote

Post by sharplinux » Wed Jun 30, 2010 10:15 pm

Hello,

I have a problem to enable SSL on my OC.

SSL and not shared.

Configured in / admin / config.php

/ / HTTP
define ('HTTP_SERVER', 'http://www.loja.com.br/admin/');
define ('HTTP_CATALOG', 'http://www.loja.com.br/');
define ('HTTP_IMAGE', 'http://www.loja.com.br/image/');

/ / HTTPS
define ('HTTPS_SERVER', 'https://www.loja.com.br/admin/');
define ('HTTPS_IMAGE', 'https://www.loja.com.br/image/');

I went to System / Settings / Server and enable SSL.

But a 500 error occurs at run time when using the https:
sharplinux
Newbie
Posts
4
Joined
Tue Jun 29, 2010 4:32 am
Top

Re: SSL config in 1.4.7

Quote

Post by JNeuhoff » Wed Jun 30, 2010 11:47 pm

But a 500 error occurs at run time when using the https:
Check your server's error_log.

Export/Import Tool * SpamBot Buster * Unused Images Manager * Instant Option Price Calculator * Number Option * Google Tag Manager * Survey Plus * OpenTwig

User avatar
JNeuhoff
Guru Member
Posts
7491
Joined
Wed Dec 05, 2007 3:38 am
Top

Re: SSL config in 1.4.7

Quote

Post by sharplinux » Thu Jul 01, 2010 12:29 am

Hello,

These errors are appearing.

2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/setting/setting.php on line 231
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/setting/setting.php on line 237
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/setting/setting.php on line 250
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/setting/setting.php on line 252
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/setting/setting.php on line 254
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/setting/setting.php on line 260
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/setting/setting.php on line 270
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/setting/setting.php on line 270
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/setting/setting.php on line 270
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_IMAGE - assumed 'HTTPS_IMAGE' in /home/lojas/public_html/admin/controller/setting/setting.php on line 571
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_IMAGE - assumed 'HTTPS_IMAGE' in /home/lojas/public_html/admin/controller/setting/setting.php on line 583
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 8
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 75
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 76
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 77
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 78
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 79
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 80
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 81
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 82
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 83
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 84
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 85
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 100
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 101
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 102
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 103
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 104
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 105
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 106
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 107
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 108
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 109
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 110
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 111
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 112
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 113
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 114
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 115
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 116
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 117
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 119
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 120
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 121
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 122
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 123
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 124
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 125
2010-06-30 15:52:19 - PHP Notice: Use of undefined constant HTTPS_SERVER - assumed 'HTTPS_SERVER' in /home/lojas/public_html/admin/controller/common/header.php on line 126
2010-06-30 15:52:21 - PHP Notice: Use of undefined constant HTTPS_IMAGE - assumed 'HTTPS_IMAGE' in /home/lojas/public_html/admin/controller/setting/setting.php on line 882
sharplinux
Newbie
Posts
4
Joined
Tue Jun 29, 2010 4:32 am
Top
Post Reply
Return to “Bug Reports”
Who is online

Users browsing this forum: No registered users and 6 guests