Page 1 of 1

SSL certificate still showing not secure?

Posted: Thu Nov 18, 2010 3:36 pm
by freni32
Hello,
Hoping someone can help me out with SSL and validating my website. I have my SSL installed on my website, I edit the admin/config.php file as well, and in admin panel I turned on SSL, my store url in my admin panel I also have set to https://, well when you go to my site in the https:// it still shows that it is untrusted. When I go to "view source" of my page I see things still using http:// and it is tons of things, can anyone help me and figure out what I need to do so it doesnt alert users saying information is unsecure?

Here is my website:

https://www.funeralhomeflowers.org

Here is my admin/config.php file:

<?php
// HTTP
define('HTTP_SERVER', 'http://www.funeralhomeflowers.org/admin/');
define('HTTP_CATALOG', 'http://www.funeralhomeflowers.org/');
define('HTTP_IMAGE', 'http://www.funeralhomeflowers.org/image/');

// HTTPS
define('HTTPS_SERVER', 'https://www.funeralhomeflowers.org/admin/');
define('HTTPS_IMAGE', 'https://www.funeralhomeflowers.org/image/');
define('HTTPS_CATALOG', 'https://www.funeralhomeflowers.org/');

// DIR
define('DIR_APPLICATION', '/home/fh/public_html/admin/');
define('DIR_SYSTEM', '/home/fh/public_html/system/');
define('DIR_DATABASE', '/home/fh/public_html/system/database/');
define('DIR_LANGUAGE', '/home/fh/public_html/admin/language/');
define('DIR_TEMPLATE', '/home/fh/public_html/admin/view/template/');
define('DIR_CONFIG', '/home/fh/public_html/system/config/');
define('DIR_IMAGE', '/home/fh/public_html/image/');
define('DIR_CACHE', '/home/fh/public_html/system/cache/');
define('DIR_DOWNLOAD', '/home/fh/public_html/download/');
define('DIR_LOGS', '/home/fh/public_html/system/logs/');
define('DIR_CATALOG', '/home/fh/public_html/catalog/');

Re: SSL certificate still showing not secure?

Posted: Thu Nov 18, 2010 8:53 pm
by Moggin
The page looks OK as a whole: all I can see is one item

Code: Select all

<script src="http://code.jquery.com/jquery-latest.min.js"></script>
this is coming from an outside domain, over http:

You could try

Code: Select all

<script type="text/javascript" src="//ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js"></script>
...see if it works. I have done something similar on my site.

I could be wrong, but would guess that jquery-latest gets the latest jquery version: that's version 1.4.4, and Google can supply this script over https:

I'm sure one of the others will correct me if I'm wrong

Re: SSL certificate still showing not secure?

Posted: Thu Nov 18, 2010 11:08 pm
by Moggin
freni32 wrote:...my store url in my admin panel I also have set to https://...
- no need to do this: it will cause errors. The store URL needs to stay as http:// .
Checkout pages are secured automatically when you set the store to use SSL in the admin panel.

Re: SSL certificate still showing not secure?

Posted: Fri Nov 19, 2010 12:15 am
by Qphoria
Moggin is right on both accounts

Re: SSL certificate still showing not secure?

Posted: Fri Nov 19, 2010 1:24 am
by freni32
Ok I changed my store url back to http:// and did the above edit on my cart.tpl file and your a genious!!! Working fine now!!! 8) thank you!

Re: SSL certificate still showing not secure?

Posted: Fri Nov 19, 2010 6:09 am
by Moggin
Oh good, glad we were on the right track! :) Good luck with your new store.