OSCommerce SSL woes...

[BLTZKRG]

Hello all.

First of all, thank you to Stevel where ever you are. Steve has been very helpful thus far, but I still am not able to enable SSL on my store.

Does anyone know what all of the folder/directory permissions should be? I was wondering if this had something to to with it.


Here is my includes/configure.php

define('HTTP_SERVER', 'http://estore.blitzkriegtuners.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://blitzkriegtunerscom.secure.powweb.com'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'estore.blitzkriegtuners.com');

define('HTTPS_COOKIE_DOMAIN', 'blitzkriegtunerscom.secure.powweb.com');

define('HTTP_COOKIE_PATH', '/');

define('HTTPS_COOKIE_PATH', '/');

define('DIR_WS_HTTP_CATALOG', '/');

define('DIR_WS_HTTPS_CATALOG', '/');

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');



define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');

define('DIR_FS_CATALOG', '/www/a/adminblitz/estore/htdocs/');

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');


Here is my admin/includes/configure.php


define('HTTP_SERVER', 'http://estore.blitzkriegtuners.com'); // eg, http://localhost or - https://localhost should not be NULL for productive servers

define('HTTP_CATALOG_SERVER', 'http://estore.blitzkriegtuners.com');

define('HTTPS_CATALOG_SERVER', 'https://blitzkriegtunerscom.secure.powweb.com');

define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module

define('DIR_FS_DOCUMENT_ROOT', '/www/a/adminblitz/estore/htdocs/'); // where your pages are located on the server. if $DOCUMENT_ROOT doesnt suit you, replace with your local path. (eg, /usr/local/apache/htdocs)

define('DIR_WS_ADMIN', '/admin/');

define('DIR_FS_ADMIN', DIR_FS_DOCUMENT_ROOT . DIR_WS_ADMIN);

define('DIR_WS_CATALOG', '/');

define('DIR_FS_CATALOG', DIR_FS_DOCUMENT_ROOT . DIR_WS_CATALOG);

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_CATALOG_IMAGES', DIR_WS_CATALOG . 'images/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

define('DIR_WS_CATALOG_LANGUAGES', DIR_WS_CATALOG . 'includes/languages/');

define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');

define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');

define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');

define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');


Any help is greatly appreciated.

Thank you.

[stevel]

You're using the subdomain method which has your files at /www/a/adminblitz/estore/htdocs/ . This does not work at PowWeb with SSL. You have to move the store files to /www/a/adminblitz/htdocs/estore/ and add a .htaccess that rewrites the incoming request with a subdomain to this folder. You'll then need to use:

define('DIR_WS_HTTPS_CATALOG', '/estore/');

to get the SSL files accessed right.

PowWeb's SSL implementation can access files under your package's main htdocs folder only.

[BLTZKRG]

Steve,

Thank you, this has helped.

This is what I have now done.

1. Copied the Store files to a subdirectory of htdocs (http://www.blitzkriegtuners.com/estore/htdocs)
2. Installed the oscommerce patch as described in thread: http://forums.powweb.com/showthread.php?t=59267&highlight=.htaccess


Here is what I am now experiencing.

If I load http://www.blitzkriegtuners/estore/htdocs then the store will load secure.
If I click on my catagories on the left, it directs me back to the unsecure site of http://estore.blitzkriegtuners.com.

Does this mean that I have to recreate my categories in the store, or will this be resolved with the .htaccess file?


Then in regard to .htaccess...

I have reviewed the information about the .htaccess file as described in the following thread but I am still unsure how and where I need to set up the redirect for the .htaccess:

http://forums.powweb.com/showthread.php?t=60647&highlight=subdomain


Again, your help is greatly appreciated as SSL is very new to me.

THANK YOU!!!

[stevel]

Regarding the categories links - that's the way it's supposed to work. Those links always drop you out of https if you're in it. Is this a problem?

The method described in the thread you linked to is not quite what you want. You want the following in a .htaccess under your main htdocs:

RewriteEngine On
Options +FollowSymlinks
RewriteBase /
RewriteCond %{HTTP_HOST} estore.blitzkriegtuners.com
RewriteCond %{REQUEST_URI} !estore/
RewriteRule ^(.*)$ estore/$1 [L]

and then remove the estore folder at the top level (the one with estore/htdocs).