Post by xairflyer » Thu Oct 26, 2017 11:32 pm

How do I change my site to https, I thought opencart being a e commerce site it was already secure ?

New member

Posts

Joined
Sun Jan 11, 2015 8:58 am

Post by EarthDawn » Fri Oct 27, 2017 8:16 pm

You need to buy and install an SSL certificate either yourself or through whoever hosts your servers.

Newbie

Posts

Joined
Fri Oct 27, 2017 3:12 am

Post by MrPhil » Fri Oct 27, 2017 9:38 pm

Either way, your host has to install your SSL certificate, so you'll have to get them in the loop (they may or may not sell certs, too). Note that many hosts are starting to provide SSL free of charge, to all customers, so check first if that's about to happen.

Regarding the assertion that "it's already secure", OpenCart is not a service that your are buying into. It's software that you need to install on your own server. SSL support is available (built in), but you are still responsible for obtaining SSL for your site.

User avatar
Active Member

Posts

Joined
Wed May 10, 2017 11:52 pm

Post by xairflyer » Wed Nov 01, 2017 2:36 am

Thanks for replies so when I buy a cert and my host installs it, thats it my site will now be https ?

New member

Posts

Joined
Sun Jan 11, 2015 8:58 am

Post by straightlight » Wed Nov 01, 2017 2:48 am

Take note that free provided SSL certificate can be part of self-signed certificate strategies which payment and shipping providers may decline. Ensure to ask your host provider that, if it is a free-offered certificate solution, it is not a self-signed certificate since you are planning to sell products and services online.

The most generated errors being found on Opencart forum originates from contributed programming. The increased post counters are caused by redundancies of the same solutions that were already provided prior.


Regards,
Straightlight
Opencart.com Administrator / Quality Assurance Analyst / Programmer


Legendary Member

Posts

Joined
Mon Nov 14, 2011 11:38 pm
Location - Canada, ON

Post by Dhaupin » Sat Nov 04, 2017 2:04 am

xairflyer wrote:
Wed Nov 01, 2017 2:36 am
Thanks for replies so when I buy a cert and my host installs it, thats it my site will now be https ?
1) Get an SSL certificate from your host for both the www and non-www version of your domain. They should offer free ones through either LetsEncrypt, cPanels Comodo. Else, pay for one :)

2) Make sure they work by visiting https://mysite.com and https://www.mysite.com

3) If they are not already, change your Opencart urls to use https:// in both config.php's and any multistore settings

4) In Opencart settings, navigate to the "server" tab and enable the SSL for checkout and account areas.

5) Go through account and checkout and see if things are https://

That is only part of it. If you want to enforce SSL for every page on your store and admin, you can either attempt to do this with server side redirects, or use an opencart mod.

If youre interested, we have a mod just for this purpose, its called SSL Everywhere. It repairs a bunch of things in Opencart, then forces https all over your store so you dont have to worry about it:

For 3.x - https://www.opencart.com/index.php?rout ... n_id=32053
For 1.5.x - https://www.opencart.com/index.php?rout ... n_id=19396

https://creadev.org | support@creadev.org - Opencart Extensions, Integrations, & Development. Made in the USA.


User avatar
Active Member

Posts

Joined
Tue May 13, 2014 3:45 am
Location - PA
Who is online

Users browsing this forum: No registered users and 8 guests