PDA

View Full Version : Getting Admin panels to work with SSL?


birdoprey5
10-15-06, 10:50 AM
So I got CubeCart installed and working well. It works in SSL mode for customers without a problem. It works in non-SSL mode perfectly as well, however as I will be taking credit card numbers I will only send people there via the secured link.

However, I can not get the admin panel to work via SSL...
http://mydomain.com/store/admin = Fine
https://mydomain.powweb.com/store = Fine
https://mydomain.powweb.com/store/admin = world of hurt
The pictures don't show at all... The pages don't work - there is usually an extra '/store/admin' or just '/admin/admin' in the path... I can can manually type in the right path but the pictures still don't show and all links are broken making it a uselss work around.

Any ideas on what is going on?

stevel
10-15-06, 11:51 AM
I am not familiar with CubeCart, but it is probably similar to osCommerce in that there is a separate set of configuration settings for URLs accessed from admin. You need to adjust those for the PowWeb https paths. This may be in a file or perhaps in the database.

birdoprey5
10-15-06, 12:05 PM
Well I did see an "SSL" section after I posted this... One line was alreqady filled in, one was the path from root "/store/" which I filled in...

However there is an "SSL on/off" mode set to off... but now it's working fine. I wonder what setting it to "on" does? Maybe disbable unsecure access completely?

Not going to try it, it's working fine. :)

stevel
10-15-06, 02:05 PM
It probably causes all links within admin to be https - and this is a good thing, as otherwise you are potentially exposing private customer data. You should try to figure out what is wrong. Note that there will be two paths of interest - one that is server-relative for storing and accessing files, and another for URLs.

IanS
10-15-06, 04:43 PM
Also, under new scheme, httpS requires username not domainname in the httpS://username.powweb.com/store/admin type path.

http[S]://domainname.powweb.com may still be reaching legacy servers.