ssl configuration problems

[convello]

so i need to have ssl enabled to handle transactions to my merchant account and i've tried to enable it every way i've seen documented or in the forums. i've used the forum search function and read all of the other threads on ssl and have followed the directions. i'm using a shared ssl certificate through perfora.net with 1&1 hosting providers. i've modified my config.php to the following

// Host and directory where cs-cart is installed on usual server
$cscart_http_host = 'www.mystore.com';
$cscart_http_dir = '/shop';

// Host and directory where cs-cart is installed on secure server
$cscart_https_host = 'ssl.perfora.net';
$cscart_https_dir = '/mystore.com/shop';

and also have ssl enabled for admin login and shopping cart in general settings yet whenever i try to access admin or the shopping cart now i get internal server errors or "error can't load" its also strange that when i load the site, www.hampdenclothing.com/shop/admin.php the following syntax is appended

https://ssl.perfora.net/mystore.com/shop/admin.php?acsid=11d28da8af9ead53f173ebccb47348a9&sl=EN&currency=usd&acsid=11d28da8af9ead53f173ebccb47348a9&sl=EN&currency=usd&acsid=11d28da8af9ead53f173ebccb47348a9&sl=EN&currency=usd&acsid=11d28da8af9ead53f173ebccb47348a9&sl=EN&currency=usd&acsid=11d28da8af9ead53f173ebccb47348a9&sl=EN&currency=usd&acsid=11d28da8af9ead53f173ebccb47348a9&sl=EN&currency=usd&acsid=11d28da8af9ead53f173ebccb47348a9&sl=EN&currency=usd&acsid=11d28da8af9ead53f173ebccb47348a9&sl=EN&currency=usd&acsid=11d28da8af9ead53f173ebccb47348a9&sl=EN&currency=usd&acsid=11d28da8af9ead53f173ebccb47348a9&sl=EN&currency=usd&acsid=11d28da8af9ead53f173ebccb47348a9&sl=EN&currency=usd&acsid=11d28da8af9ead53f173ebccb47348a9&sl=EN&currency=usd&acsid=11d28da8af9ead53f173ebccb47348a9&sl=EN&currency=usd&acsid=11d28da8af9ead53f173ebccb47348a9&sl=EN&currency=usd&acsid=11d28da8af9ead53f173ebccb47348a9&sl=EN&currency=usd&acsid=11d28da8af9ead53f173ebccb47348a9&sl=EN&currency=usd&acsid=11d28da8af9ead53f173ebccb47348a9&sl=EN&currency=usd&acsid=11d28da8af9ead53f173ebccb47348a9&sl=EN&currency=usd&acsid=11d28da8af9ead53f173ebccb47348a9&sl=EN&currency=usd&acsid=11d28da8af9ead53f173ebccb47348a9&sl=EN&currency=usd

it seems odd to me tha the syntax would repeat the same variables over and over again so it makes me think i might've typed something wrong in the config.php but as far as i can see everything is setup how its instructed to be. any help on this would be appreciated i have a deadline i'm trying to reach and ssl is the only problem i have left to fix.

[roban]

// Host and directory where cs-cart is installed on secure server
$cscart_https_host = 'ssl.perfora.net';
$cscart_https_dir = '/mystore.com/shop';

should be:
// Host and directory where cs-cart is installed on secure server
$cscart_https_host = 'www.mystore.com';
$cscart_https_dir = '/mystore.com/shop';

[convello]

This is the information given to me by my hosting service provider

Shared SSL Encryption: https://ssl.perfora.net/hampdenclothing.com

In your response you wrote I should change my config.php to the following:

$cscart_https_host = 'www.mystore.com';
$cscart_https_dir = '/mystore.com/shop';

so in effect it would be:

$cscart_https_host = 'www.hampdenclothing.com';
$cscart_https_dir = '/hampdenclothing.com/shop';

but should'nt i have to use ssl.perfora.net for the $cscart_https_host? since its a shared ssl? sorry to be bothering you with this but i currently have paid for support but they haven't provided me with a solution yet and i'm like 99% done with the site the only thing holding me up is ssl.

[zardos]

Hi convello

See if this helps you, it is the way i have to do it for shared server SSL, and your server should provide you with some instructions on this.


// Host and directory where cs-cart is installed on usual server
$cscart_http_host = 'www.megapcs4u.co.uk';
$cscart_http_dir = '/megapcs';

// Host and directory where cs-cart is installed on secure server
$cscart_https_host = 'Name of server.mywebserver.net';
$cscart_https_dir = '/~username/megapcs';

[convello]

still not working, i've been doing google searches and it seems to be something about how 1&1's shared ssl handles the requests, there are a couple examples of how to change your config.php's for other shopping carts but nothing on cs-cart. i think what i'm going to have to do is buy a networksolutions.com package and move everything to that hosting setup. what a PAIN IN THE @$#%@. now i have to try to get the admins to let me get a copy of 1.3.4 because its not in my file bin and i need the install package for the new host. i hate my life.

[kearnyshop]

Read this thread as I'm having the exact same problem with the shared SSL on 1and1.

1and1 has lots of similar issues with other 'carts as mentioned by convello.
The other guys have come up with some pretty complex fixes it looks like.
Big set back if I need to dump 1and1, bummer!

I think I tried all of the combinations in config.php as mentioned in "shared ssl" threads and no luck. There must be more of us on 1and1, using shared SSL on this forum...??

Here's how I'm entered right now, but I did try other ways mentioned in previous posts (using root / for my store):
// Host and directory where cs-cart is installed on secure server
$cscart_https_host = 'ssl.perfora.net/mydomain.com';
$cscart_https_dir = '';
Also tried:
// Host and directory where cs-cart is installed on secure server
$cscart_https_host = 'ssl.perfora.net';
$cscart_https_dir = 'mydomain.com';

Still get that SSL check failed on the admin settings panel.

I don't think I can use Google CheckOut or PayPal without SSL??

I wonder if 1and1's dedicated SSL has the same problem?

Everything was going very well with 1.3.5 SP2 until now.:(

CS-Cart is the best out there!!
kearnyshop

[BarryH]

Do you have password protection the frontend of your cart?

If you do remove it then run SSL then put password back if you wish.

That worked for us

BarryH

[kearnyshop]

Hi Barry,
No I don't think I do?? It's mostly all default setup. Anonymous checkout enabled.
Still getting this message when trying to tick SSL under admin:
""
Warning
The secure connection check has failed. Please check HTTPS settings in "config.php" file and make sure that SSL certificate is installed on your server
""

I think this is a direct conflict between CS-Cart 1.3.5 sp2 and 1and1's shared SSL.
CS-Cart 1.3.3 was working ok with shared SSL I think.
I know 1and1 kinda sucks, but no time to change now.
I might just buy a dedicated 1and1 certificate -- can I get a 2nd confirm from anyone if that works?? Hate to waste $50.

Thanks for your help BarryH,
Best Regards, kearnyshop

[BarryH]

Hi Kearnyshop

Before you spend any money why not ask 1and1 if they can offer any help with your issue. Surely they can tell you why you're getting this conflict.

If you can't get sorted out why not look for a free trial SSL, Comodo do one, sure there must be others. Might be worth it, and probably better than a shared SSL anyway. IMO

Hope you get this resolved soon.

Barry

[kearnyshop]

Hi Barry, Thanks for that tip! Didn't even realize that trials existed for SSL now. A google search revealed a cheaper place not too called RapidSSL that did look OK.
convello told me a dedicated SSL would fix this problem, be he didn't say if it was 1and1's version. I'm just not quite fully up to learning how to use a 3rd party's SSL on my shared Linux 1and1 package. Especially since it's "just" (but I'm broke!) $50 & in house install (saves me time I guess).
I hope it's OK to make a new thread & see who else is using 1and1 right now. You're right about bugging 1and1, it's just that I know it would be hopeless. The service is "OK" , as long as I tough out all the little problems. If you can work with their automated console you can make it. I know I should switch, but it seems like every host has it's problems.
Thanks again for your help!
kearnyshop

[Alfie]

Im using 1and1 and brought a dedicated through godaddy @ £15 (30 usd) but aparently cant use it unless i have a VPS or Dedicated. And im also having the same problem with the shared ssl. I would look into the dedicated SSL with 1and1 but its like £3.99 a month!!

Any help on the shared ssl would be a nice fix for now..

Alfie

EDIT

This is what helped for my similar problem. My customers hoster use an ssl-proxy (sslsites.de), adding the following lines to https_detect.php solved my problem with ssl-redirection and images+stylesheets links:

} elseif (isset($_SERVER['HTTP_X_FORWARDED_SERVER']) && ($_SERVER['HTTP_X_FORWARDED_SERVER']=='sslsites.de')) {
define('HTTPS', true);

worked like a charm for me! Seems to add a second or so to the load times but thats to be expected when redirecting through a proxy,

Alfie