OpenCart Community

Hi All

I have an SSL certificate installed on my domain, shows fine if I type https://www.pixeda.co.uk - I have enabled the steps required in OC and the SSL appears fine whilst I am in the Admin panel, however my Checkout Page is not showing the SSL. This to me is the most important page for SSL and is a requirement for PayPal Pro (which just hangs).

Can anyone please advise how to get the SSL on the checkout page?

My admin/config file looks like this:
// HTTPS
define('HTTPS_SERVER', 'https://www.pixeda.co.uk/store/admin/');
define('HTTPS_IMAGE', 'https://www.pixeda.co.uk/store/image/');

Is there another area that needs adding to this to secure the Checkout page?

Kind regards

Mike

Yes: the code above only secures the admin area.

To secure the checkout etc, go to admin panel > system > settings >server > use SSL:yes

- Did you do this though, and find that checkout still wasn't secured?

Yes that is the process I went through, but checkout page is not secure.

OK.
When I tried your link, on a secure page (such as login) in the source code the base href was showing as http://www... - whereas it should be https:
Consequently, none of the content on the page is secured.

Your SSL cert is correctly installed according to an SSL checker. So I am not sure why your page is not resolving to https: when you have enabled SSL in the admin area. I've seen this only once before here, where there was an unusual server setup.

A word with your host might be next - unless anyone else has any ideas?

I have the same problem (using a version downloaded/installed in January 2011). My web host suggested that I hand code the 'https' into the pages (base href...?).

UPDATE:
I edited the config.php file, and now the cart indicates encryption (https), but on checkout a dialog says that 'some items are not secure' but that the page IS encrytpted (in Firefox, in Chrome it reads simply as encrypted).

Will the commerce gateway company find this satisfactory?

chefboyardee wrote:I have the same problem (using a version downloaded/installed in January 2011). My web host suggested that I hand code the 'https' into the pages (base href...?).

UPDATE:
I edited the config.php file, and now the cart indicates encryption (https), but on checkout a dialog says that 'some items are not secure' but that the page IS encrytpted (in Firefox, in Chrome it reads simply as encrypted).

Will the commerce gateway company find this satisfactory?

It's difficult to know what's wrong without a link. The most common reasons for a minor security warning are: 1) unsecured images and 2) unsecured scripts. Try this post for some pointers:
http://forum.opencart.com/viewtopic.php ... 40#p153281

If that's not the problem though, come back to the forum.