OpenCart Community

How do I change my site to https, I thought opencart being a e commerce site it was already secure ?

You need to buy and install an SSL certificate either yourself or through whoever hosts your servers.

Either way, your host has to install your SSL certificate, so you'll have to get them in the loop (they may or may not sell certs, too). Note that many hosts are starting to provide SSL free of charge, to all customers, so check first if that's about to happen.

Regarding the assertion that "it's already secure", OpenCart is not a service that your are buying into. It's software that you need to install on your own server. SSL support is available (built in), but you are still responsible for obtaining SSL for your site.

Thanks for replies so when I buy a cert and my host installs it, thats it my site will now be https ?

Take note that free provided SSL certificate can be part of self-signed certificate strategies which payment and shipping providers may decline. Ensure to ask your host provider that, if it is a free-offered certificate solution, it is not a self-signed certificate since you are planning to sell products and services online.

xairflyer wrote: ↑

Wed Nov 01, 2017 2:36 am

Thanks for replies so when I buy a cert and my host installs it, thats it my site will now be https ?

1) Get an SSL certificate from your host for both the www and non-www version of your domain. They should offer free ones through either LetsEncrypt, cPanels Comodo. Else, pay for one

2) Make sure they work by visiting https://mysite.com and https://www.mysite.com

3) If they are not already, change your Opencart urls to use https:// in both config.php's and any multistore settings

4) In Opencart settings, navigate to the "server" tab and enable the SSL for checkout and account areas.

5) Go through account and checkout and see if things are https://

That is only part of it. If you want to enforce SSL for every page on your store and admin, you can either attempt to do this with server side redirects, or use an opencart mod.

If youre interested, we have a mod just for this purpose, its called SSL Everywhere. It repairs a bunch of things in Opencart, then forces https all over your store so you dont have to worry about it:

For 3.x - https://www.opencart.com/index.php?rout ... n_id=32053
For 1.5.x - https://www.opencart.com/index.php?rout ... n_id=19396