Shared SSL path in OS Commerce

[BA@CHW]

First time into php & OS Commerce.
I thought there would be many threads in here re SSL, but can't find any.
The problem ....... turning on SSL causes various errors depending on which path to the cert I try.

So far I have tried the various formats in OSC help forums, and
tried two conflicting bits of advice from EUK help chat.
One said SSL had not been activated by EUK & use //nimrod.eukhost.com/~username/
The other said it had to be //87.117.224.115/~username/
Neither worked.

I need to put the paths in the 2 configure.php files in OS Commerce.
eg the first few lines of one installed by default as:-
define('HTTP_SERVER', 'http://mydomain');
define('HTTP_CATALOG_SERVER', 'http://mydomain');
define('HTTPS_CATALOG_SERVER', 'https://mydomain');
define('ENABLE_SSL_CATALOG', false);

After changing Enable to true, nothing worked
After changing the paths in both configure.php files to server DNS and/or IP, invalid certificate messages pop up and accessing the likes of customer account fail.

Can anyone help please?

[Cristiano]

Hi there,

I have reinstalled SSL certificate on the server. Please try accessing the URL https://nimrod.eukhost.com

Is is not mandatory to go with a dedicated SSL on the domain, you can use shared SSL certificate for the secure URL's as the shared SSL's are issued from trusted Certificate Authority. But, if you use the shared SSL you need to change the secure URL's to https://hostname/~username in the config files. SSL certificates are host based and not Ip based.

Note :: replace the hostname with actual server hostname

[BA@CHW]

thanks for the quick reply
to confirm, you are saying, for the present shared ssl,
use //nimrod.eukhost.com/~username
exactly like that?

I believe this is one of the alternatives I have already tried, but I will try this again now and come back with the outcome.
thx again

[Cristiano]

thanks for the quick reply
to confirm, you are saying, for the present shared ssl,
use //nimrod.eukhost.com/~username
exactly like that?

I believe this is one of the alternatives I have already tried, but I will try this again now and come back with the outcome.
thx again

Yes, use the URL https://nimrod.eukhost.com/~username. Earlier, the SSL certificate was not installed properly on the server and that's the reason it was not working on the hostname.

You are Welcome. All the Best

Note :: replace the username with actual cPanel username

[BA@CHW]

these are the first lines on includes/configure.php
define('HTTP_SERVER', 'http://mydomain');
define('HTTPS_SERVER', 'https://nimrod.eukhost.com/~username');
define('ENABLE_SSL', true);

and
these are from admin/includes/configure.php
define('HTTP_SERVER', 'https://nimrod.eukhost.com/~username');
define('HTTP_CATALOG_SERVER', 'https://nimrod.eukhost.com/~username');
define('HTTPS_CATALOG_SERVER', 'https://nimrod.eukhost.com/~username');
define('ENABLE_SSL_CATALOG', true);

I think these are the recommnded settings from OSC Forum but if you know OS Commerce setup, do you think these are correct, as this still gives me a 404 error when I try anything that needs a https path?

[Cristiano]

these are the first lines on includes/configure.php
define('HTTP_SERVER', 'http://mydomain');
define('HTTPS_SERVER', 'https://nimrod.eukhost.com/~username');
define('ENABLE_SSL', true);

and
these are from admin/includes/configure.php
define('HTTP_SERVER', 'https://nimrod.eukhost.com/~username');
define('HTTP_CATALOG_SERVER', 'https://nimrod.eukhost.com/~username');
define('HTTPS_CATALOG_SERVER', 'https://nimrod.eukhost.com/~username');
define('ENABLE_SSL_CATALOG', true);

I think these are the recommnded settings from OSC Forum but if you know OS Commerce setup, do you think these are correct, as this still gives me a 404 error when I try anything that needs a https path?

I have checked the config files on the server under your account, the URL's in the config files are incorrect. A "~" is missing in between the hostname and cPanel username. Please check once.

If you still face any issues please post them here OR drop an email at support[@]eukhost.com.

[BA@CHW]

oh bu***r
I thought the tilde (~) was just used to indicate this needs replaced by the actual name, and therefore left it out. Told you I was dumb!
thx again - keep well and don't go away, I might need you again

[Cristiano]

You are Welcome

Ah.. I forgot..
to eUKhost Forums. We hope you enjoy your stay here

[BA@CHW]

think it's working - just need to make Paypal work with it now. Thx again

[Tux]

Hello,

You are most

Please update us if you are facing any problem with shared ssl.

[Cristiano]

think it's working - just need to make Paypal work with it now. Thx again

To make Paypal work with OSCommerce please refer Paypal with OSCommerce.

Let us know if we can assist you further. Good Luck !!!

[BA@CHW]

Well - no more 404 errors, so I think the SSL cert is on the server ok.
But discovered another issue.

When customer logs in, all is ok while in secure (https) environment, but browse to any http part of the site, e.g. view any stock or even the cart contents and the customer becomes logged out. In reverse order, add to cart then try to buy and you can create an account but it forgets what you have put in the cart!

Tried all sorts of variations in configure.php - none work.

Anyone have any suggestions?

Here's what includes/configure.php is currently

define('HTTP_SERVER', 'http://mydomain');
define('HTTPS_SERVER', 'https://nimrod.eukhost.com/~username');
define('ENABLE_SSL', true);
define('HTTP_COOKIE_DOMAIN', 'mydomain');
define('HTTPS_COOKIE_DOMAIN', 'nimrod.eukhost.com');
define('HTTP_COOKIE_PATH', '/mycatalogue/');
define('HTTPS_COOKIE_PATH', '/mycatalogue/');
define('DIR_WS_HTTP_CATALOG', '/mycatalogue/');
define('DIR_WS_HTTPS_CATALOG', '/mycatalogue/');
define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');
define('DIR_FS_CATALOG', '/home/username/public_html/mycatalogue/');
define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

define('DB_SERVER', 'localhost');
define('DB_SERVER_USERNAME', 'username_osc1');
define('DB_SERVER_PASSWORD', '**********');
define('DB_DATABASE', 'username_osc1');
define('USE_PCONNECT', 'false');
define('STORE_SESSIONS', 'mysql');

[Rock]

The config looks ok to me, I doubt the sessions aren't being saved properly.. Please open up a ticket with our Support Dept, so we can take a further insight..

[BA@CHW]

thx

have done

[Rock]

thx

have done

You're welcome...

[BA@CHW]

The result of raising a ticket is, if I understand it correctly, that EUKhost shared SSL and OS Commerce is completely incompatible.
Shame the sales people told me the opposite when I signed up.
Here's what Support told me. Does anyone know any different?

We have tried all possibility to resolve your issue but it seems to be that oscommerce database is not accepting session cookies for secure and non secure URL due to different URL'S for secure https://nimrod.eukhost.com and non secure Cosmetic House Wholesale. If you want to sue secure URL without logout then you need to enable the force cookies from your admin section >> configuration but force Cookie Use can only work on your site if you are using no ssl or a full ssl cert for catalog.As you are using a shared ssl cert then you will always end up on the cookie_usage.php osCommerce checks to see that the http and https domain matches, and if it doesn't this feature won't work because on a shared ssl the https cookie domain does not match up with the http cookie domain.

Please let us know if you have any further problem.

Regards,
Support Team.

[eUK-Ralf]

Hi Bill,

While investigating the issue i have come across with the URL, Where the same issue has been discussed.
I suggest you to go through this Link osCommerce Community Support Forums

If you purchase Dedicated SSL Certificate, you won't face session cookie issue with your osCommerce site.

[BA@CHW]

Hi Bill,

While investigating the issue i have come across with the URL, Where the same issue has been discussed.
I suggest you to go through this Link osCommerce Community Support Forums

If you purchase Dedicated SSL Certificate, you won't face session cookie issue with your osCommerce site.

thanks for the suggestion. Read it all and it is way beyond me
I was hoping installing OSC would be fairly simple matter of following instructions, but this looks like buying an SSL cert is the only solution.
thx again