Post by 996redbull » Wed Apr 06, 2011 4:37 pm

Hi All

I have an SSL certificate installed on my domain, shows fine if I type https://www.pixeda.co.uk - I have enabled the steps required in OC and the SSL appears fine whilst I am in the Admin panel, however my Checkout Page is not showing the SSL. This to me is the most important page for SSL and is a requirement for PayPal Pro (which just hangs).

Can anyone please advise how to get the SSL on the checkout page?

My admin/config file looks like this:
// HTTPS
define('HTTPS_SERVER', 'https://www.pixeda.co.uk/store/admin/');
define('HTTPS_IMAGE', 'https://www.pixeda.co.uk/store/image/');

Is there another area that needs adding to this to secure the Checkout page?

Kind regards

Mike

Newbie

Posts

Joined
Mon Mar 14, 2011 9:49 pm

Post by Moggin » Wed Apr 06, 2011 6:34 pm

Yes: the code above only secures the admin area.

To secure the checkout etc, go to admin panel > system > settings >server > use SSL:yes

- Did you do this though, and find that checkout still wasn't secured?

Active Member

Posts

Joined
Wed May 05, 2010 4:56 am

Post by 996redbull » Mon Apr 11, 2011 10:57 pm

Yes that is the process I went through, but checkout page is not secure.

Newbie

Posts

Joined
Mon Mar 14, 2011 9:49 pm

Post by Moggin » Tue Apr 12, 2011 1:08 am

OK.
When I tried your link, on a secure page (such as login) in the source code the base href was showing as http://www... - whereas it should be https:
Consequently, none of the content on the page is secured.

Your SSL cert is correctly installed according to an SSL checker. So I am not sure why your page is not resolving to https: when you have enabled SSL in the admin area. I've seen this only once before here, where there was an unusual server setup.

A word with your host might be next - unless anyone else has any ideas?

Active Member

Posts

Joined
Wed May 05, 2010 4:56 am

Post by chefboyardee » Fri May 20, 2011 2:58 am

I have the same problem (using a version downloaded/installed in January 2011). My web host suggested that I hand code the 'https' into the pages (base href...?).

UPDATE:
I edited the config.php file, and now the cart indicates encryption (https), but on checkout a dialog says that 'some items are not secure' but that the page IS encrytpted (in Firefox, in Chrome it reads simply as encrypted).

Will the commerce gateway company find this satisfactory?

Newbie

Posts

Joined
Fri May 20, 2011 2:44 am

Post by Moggin » Sun May 22, 2011 12:57 am

chefboyardee wrote:I have the same problem (using a version downloaded/installed in January 2011). My web host suggested that I hand code the 'https' into the pages (base href...?).

UPDATE:
I edited the config.php file, and now the cart indicates encryption (https), but on checkout a dialog says that 'some items are not secure' but that the page IS encrytpted (in Firefox, in Chrome it reads simply as encrypted).

Will the commerce gateway company find this satisfactory?
It's difficult to know what's wrong without a link. The most common reasons for a minor security warning are: 1) unsecured images and 2) unsecured scripts. Try this post for some pointers:
http://forum.opencart.com/viewtopic.php ... 40#p153281

If that's not the problem though, come back to the forum.

Active Member

Posts

Joined
Wed May 05, 2010 4:56 am
Who is online

Users browsing this forum: No registered users and 16 guests