| Author |
 Topic  |
|
|
SkySurfer
Recruit
20 Posts |
 Posted - 04/12/2004 : 12:28:57 PM
|
Hello,
I am trying to setup the cart to use SSL, this is my first time doing anything with ssl and had a few problems trying to set it up. I purchased a SSL certficate and had my web hosting service install it on the server. After installation the host sent me an email and said now I have to move all pages and images that I want secure, to a folder outside of my wwwroot directory. I wouldnt think the cart would work if I moved the checkout pages outside of my wwwrroot directory, I dont even really know how to link to a page outside of my wwwroot directory, so I havent tried that yet. I did try checking the box for ssl and setting the ssl url in the control panel. If I set the ssl url to "www.domain.com" the checkout pages are secure, using https but a warning pops up stating "the name on the certificate does not match the name of the site" - this is because the name on the certificate is "domain.com" not "www.domain.com". So ...... If I set the SSL url in control panel to "domain.com" rather than "www.domain.com" the next checkout page wont load, an warning box pops up and says " this page is not secure, blah, blah, blah, would you like to continue?" and If I choose yes it just refreshes the same page, theres no way to proceed.
Does anyone know how I can fix this, and what if any pages need to be moved outside of my wwwroot directory.
Thanks for any help,
Mark |
|
|
zwemkec
Moderator
USA
713 Posts |
Posted - 04/13/2004 : 11:53:25 AM
|
I have never heard of the "outside the webroot" request your host is making. I don't believe that is a necessary step.
However there are some things you are do with the cart that makes SSL easier.
1. When you write a link or include a file, don't use the fully qualified domain name. Just use the folders and file name. For instance, http://www.aspilot.com/images/logo.gif will work, but images/logo.gifis better because the folder is accessible if your protocol is http or https The same principle applies to JavaScript includes
2. Write your links in the same manner. If I am on our site, writing a link to http://www.aspilot.com/buyitnow.asp isn't as flexible as buyitnow.asp
The main difference is that with the fully qualified name, you can see that you are dictating the protocol (http vs https) and if you don't specify, the site will stay in whichever protocol it is in. The Pilot Cart takes care of switching you into secure mode when you need it for checkout.
The domain name does need to match exactly the SSL cert. You can get the cert re-issued. Some companies will make you re-purchase, some won't. It could take a few days to get it as well.
Another option is to set the Pilot Cart URL and Secure URL to match your cert. This would work. Keep in mind that cookies on the computer (how we track users from page to page) think that www.aspilot.com is a different site then aspilot.com although every good web server in the world is set up to make both www. and . point to the same files. The cookies are different though, so it might seem like a dropped cart when they go from one step to the other. For the most part, this hasn't been a big issue in carts that have chosen to use aspilot.com instead of www.aspilot.com
<%
Chris Zwemke
zwemkec @ aspilot . com
www.aspilot.com
%> |
 |
|
|
scarab
Forum Admin
USA
413 Posts |
Posted - 04/13/2004 : 12:49:19 PM
|
Your host blew it, they should have registered your Cert as www.domain.com. Have them contact the cert issuer and get it changed. There shoudl be ZERO cost for this and if their is, suggest your host pay for it.
Andy Spliethof
ASPilot
www.ASPilot.com
A division of Spliethof, Inc. |
|
|
| |
Topic |
|
|
|
SSL Installation
