Configuring with shared SSL Certificate

  • Posts: 19
  • Thank you received: 0
13 years 7 months ago #13882

Hi,

I'm setting up an eCommerce Shop for the first time using HikaShop (I've used the "Catalog" mode before), and I'm having trouble getting things to work with the shared SSL Certificate provided by my hosting company.

First of all:

Is it possible to use a shared SSL Certificate without visitors getting "This Connection is Untrusted" popup messages? I've been reading around on eCommerce forums and can't find a clear answer to this. There seems to be some agreement that shared SSL Certificates are by definition a little less secure but are OK for small businesses, and of course the domain will change which might put some customers off - but I can't get a clear answer as to whether the following message is an inherent limitation of using a shared SSL certificate:

*************************************************
This Connection is Untrusted

You have asked Firefox to connect securely to www.julian-andrews.info , but we can't confirm that your connection is secure.

Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified.

What Should I Do?

If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue.

Technical Details

www.julian-andrews.info uses an invalid security certificate.

The certificate is only valid for the following names:
*.secure-secure.co.uk , secure-secure.co.uk

(Error code: ssl_error_bad_cert_domain)
...
...

**************************************************

Second Question:

I've added the following code to the Display>View>Checkout - Step file (as described in post www.hikashop.com/en/support/forum/4-how-...hared-ssl.html#12809 ):

if(strtolower($_SERVER['HTTPS']) != "on"){ 
 $app =& JFactory::getApplication(); 
 $requestUri = $_SERVER['PHP_SELF']; 
 if (!empty($_SERVER['QUERY_STRING'])) $requestUri = rtrim($requestUri,'/').'?'.$_SERVER['QUERY_STRING']; 
 $app->redirect('https://web155.secure-secure.co.uk/julian-andrews.info'.$requestUri); 
}

Is the Step file pulled in as the first part of each of the HikaShop Checkout pages?


Third Question:

If I set up the above customized view, and click to go to the Checkout, the target URL is set to

www.julian-andrews.info/cms/jewellery-listing/checkout.html (firefox)
www.julian-andrews.info/cms/jewellery-listing/checkout.html (IE)

If I choose to ignore the resultant error messages and "create an exception" (in firefox) I get sent to the following URL

www.julian-andrews.info/cms/jewellery-listing/checkout.html

but with a "The webpage cannot be found" HTTP 404 error.

Manually entering the mapped secure URL:

web155.secure-secure.co.uk/julian-andrew...isting/checkout.html

also gives a "The webpage cannot be found" HTTP 404 error.


Can you help sort me out?

Many Thanks
My test site can be found at www.julian-andrews.info/cms/

Please Log in or Create an account to join the conversation.

  • Posts: 82864
  • Thank you received: 13372
  • MODERATOR
13 years 7 months ago #13883

Hi,

The problem is not in HikaShop but everywhere on your website.
If you go to :
web155.secure-secure.co.uk/julian-andrews.info/cms/
the URL is working.
If you click on a link of the menu, it doesn't work. Be it a link to HikaShop or to somewhere else.
But if you enter the full non SEFed URL it works: web155.secure-secure.co.uk/julian-andrew...duct&task=show&cid=1
So the problem comes from the configuration of the certificate server which doesn't accept sub folders in the URLs like there are in joomla SEFed URLs.
If you deactivate the SEF on your website, I'm guessing that everything should work properly.

For the warning messages regarding SSL, there are several possibilities: it can come from the fact that the certificate is not sign by an authorized entity (like when you self sign them), it can come from the fact that the certificate is not signed to the good URL, it can comes from the fact that you have resources on the page which don't use HTTPS.

The following user(s) said Thank You: mad-q

Please Log in or Create an account to join the conversation.

  • Posts: 19
  • Thank you received: 0
13 years 7 months ago #13884

Thanks for the info Nicolas - I'll look into SEF and also speak to my hosting company.

Please Log in or Create an account to join the conversation.

  • Posts: 19
  • Thank you received: 0
13 years 7 months ago #13885

Another question regarding SEF. I assume most companies using Joomla and HikaShop have SEF turned on, so can most SSL certificate servers handle sub folders in URLs?

Please Log in or Create an account to join the conversation.

  • Posts: 82864
  • Thank you received: 13372
  • MODERATOR
13 years 7 months ago #13886

Most of the time, people don't setup a certificate. If you don't ask for the credit card information on your website, you don't need it. People still add it sometimes to have their users feel safer, but it's better to not have one than having it not properly setup. Also, in most cases, people will set a real certificate and not a shared one so that problem won't happen.
I must say that I'm not really familiar with shared certificates so I can't answer to that question.

Please Log in or Create an account to join the conversation.

  • Posts: 19
  • Thank you received: 0
13 years 7 months ago #13889

If I don't want to setup a certificate do I just set the "Force SSL on Checkout" option to off?

And does this mean there will be no secure connection when the user enters their address details, but when they come to making their payment they will be redirected to the selected payment bureau's secure website (e.g. PayPal)?

Please Log in or Create an account to join the conversation.

  • Posts: 82864
  • Thank you received: 13372
  • MODERATOR
13 years 7 months ago #13890

Yes and Yes.

Please Log in or Create an account to join the conversation.

  • Posts: 19
  • Thank you received: 0
13 years 7 months ago #13891

Thanks Nicolas. You've helped clarify the options for me.

Last edit: 13 years 7 months ago by td001.

Please Log in or Create an account to join the conversation.

Time to create page: 0.066 seconds
Powered by Kunena Forum