Help - Search - Members - Calendar
Full Version: Guru needed to help get cubecart working with ssl enabled
CubeCart Forums > CubeCart Version 3 > Installation & Upgrade Help (Version 3)
blip
I have read through the forum with anything related to ssl.

I started having trouble as my host was using a shared ssl cert.

Well, i went out and purchased a dedicated IP, bought and installed my own ssl cert.

When I go to enable ssl the cart doesn't work properly.

Is there anyone in this forum who has experience in setting up ssl so it works with cubecart?

i'm running 3.0.15

Everything else is up to date and should be working.

I have tried altering the $glob['storeURL' ] = 'https://www. ------ .com/shop' to both http: and https:

tried many variations of settings in admin, and can't enable ssl. What happens is the URLs in the cart start adding "/" slashes to the urls.

Arrgh. I can't find any reason why this is taking place.

I hope that someone with experience with cubecart could look at my settings via a PM, and let me know possibly where i've gone wrong.

please help.

blip
devstudent
Step one, before doing anything else make sure SSL is actually working on your domain at all.

Do this by typing in your web browser...

https://www.yourdomain.com/

..and hitting enter, your page should open with the lock icon in your address bar. If it doesn't, your problem isn't in Cube Cart, it's in your SSL on your domain.

There is a problem that will particularly affect many people who are on hosted or shared servers using cPanel (which is a vast majority of most everyone) to install their own SSL certificates from within the cPanel control panel, or if they are doing it manualy with OpenSSL commands from a shell and have cPanel installed.

cPanel will seem like it has worked to install your final signed certificate, but it will not actually always or if ever work. Depending on your level of access to the server your domain is on you'll have to go back in and physically move the certificate specific files and keys into the correct directory, then restart Apache on the server. This often requires access many people do not have on standard hosting plans so you'll likely find you'll need to contact your host providers support to fix it for you.

No need to worry, if this is a problem for you, as long as you were able to create your csr file and get your actual certificate back from your CA like it sounds you have, then it's just a matter of getting these files all moved into the correct directory. On most (just general, it could be anywhere, this is just a typical default) this directory is usualy

/home/ssl/certs/

Which should contain your .csr file you generated, and your .crt file your CA sent back to you.

/home/ssl/private/

should contain your .key private key file, you can ftp to your domain and check that these files are actually in there, if not you'll need to find them on your server and move them to the right place manually, then restart Apache if you have access and it should work.

The above directory paths should hold true if your web pages are located in

/home/public_html/

Again, this is only if your initial test of checking https://www.yourdomain.com/ doesn't work. Also note, these instructions are general, not specific, since you didn't provide any info on your site or what it's running on the ability to provide you with specific detailed info would be impossible. It should however be enough info to get you through figuring it out at least.
blip
QUOTE(devstudent @ Mar 29 2007, 03:56 AM) *
Step one, before doing anything else make sure SSL is actually working on your domain at all.

Do this by typing in your web browser...

https://www.yourdomain.com/

..and hitting enter, your page should open with the lock icon in your address bar. If it doesn't, your problem isn't in Cube Cart, it's in your SSL on your domain.

There is a problem that will particularly affect many people who are on hosted or shared servers using cPanel (which is a vast majority of most everyone) to install their own SSL certificates from within the cPanel control panel, or if they are doing it manualy with OpenSSL commands from a shell and have cPanel installed.

cPanel will seem like it has worked to install your final signed certificate, but it will not actually always or if ever work. Depending on your level of access to the server your domain is on you'll have to go back in and physically move the certificate specific files and keys into the correct directory, then restart Apache on the server. This often requires access many people do not have on standard hosting plans so you'll likely find you'll need to contact your host providers support to fix it for you.

No need to worry, if this is a problem for you, as long as you were able to create your csr file and get your actual certificate back from your CA like it sounds you have, then it's just a matter of getting these files all moved into the correct directory. On most (just general, it could be anywhere, this is just a typical default) this directory is usualy

/home/ssl/certs/

Which should contain your .csr file you generated, and your .crt file your CA sent back to you.

/home/ssl/private/

should contain your .key private key file, you can ftp to your domain and check that these files are actually in there, if not you'll need to find them on your server and move them to the right place manually, then restart Apache if you have access and it should work.

The above directory paths should hold true if your web pages are located in

/home/public_html/

Again, this is only if your initial test of checking https://www.yourdomain.com/ doesn't work. Also note, these instructions are general, not specific, since you didn't provide any info on your site or what it's running on the ability to provide you with specific detailed info would be impossible. It should however be enough info to get you through figuring it out at least.



ssl is working, but not through cubecart.

https://www.liannaklassen.com
roban
What are your settings in admin control panel/general settings for ssl?
blip
QUOTE(roban @ Mar 30 2007, 01:33 AM) *
What are your settings in admin control panel/general settings for ssl?

Directories & Folders
Root SECURE Public HTML Folder to store: /shop/
Absolute SECURE URL to store: https://www.liannaklassen.com/shop
Enable SSL:NO

I'm sorry not to reply sooner. For some reason I'm not being notified of responses to my postings.
I still haven't got this resolved.

I currently have the following in my global.inc.php:

$glob['rootDir' ] = '/home/liannakl/public_html/shop' ;
$glob['rootRel' ] = '/shop' ;
$glob['storeURL' ] = 'https://www.liannaklassen.com/shop' ;

I have tried setting the 'storeURL' to http: instead of https: and then enabling ssl through the admin section. When ssl is enabled all the links in the shopping cart begin adding "/" to the links. The links to and from the shopping cart get all messed up... each time with more slashes. /////// I would assume it's a code thing, and am suprised that others have not come across this. I have also tried to eliminate the extra slash thing by trying the admin settings with and without the /, plus in the global.inc.php to no avail.

Other than this problem, the shopping cart and available mods are incredible!!!! I just wish I could ensure that ssl was going to be working. Right now, one can get to my cart by removing the s in https and still resolve to the cart. It's likely secure the way it's set up, but I'd like to be sure.

blip
convict
Leave SSL setting as you posted.

Use following global settings:

$glob['rootDir' ] = '/home/liannakl/public_html/shop' ;
$glob['rootRel' ] = '/shop/' ;
$glob['storeURL' ] = 'http://www.liannaklassen.com/shop'

Do access your store with https://www.liannaklassen.com/shop' - browse your store, basket page either. if SSL is installed properly you must have https without additional slashes there.
blip
so, you are recommending that within the admin panel I DO NOT activate SSL...
and then i should set the global.inc.php settings as you list above?
convict
QUOTE(blip @ Apr 13 2007, 10:50 PM) *
so, you are recommending that within the admin panel I DO NOT activate SSL...
and then i should set the global.inc.php settings as you list above?

Please read what I wrote above carefully. I suggested some settings and actions to test SSL is installed correctly. If so, you can enable the SSL afterwards. If you are unable to browse store under SSL (any page) there is nothing to activate becasue of SSL certificate issue.
blip
CONVICT you are the GURU!
Thanks!
I now understand... and did what you suggested. Works like a charm.
Blessings!!!

blip
bethabelle
thanks convict!
I too was struggling with enabling my ssl - thanks for posting some info on how to check it first before going ahead and enabling!

worked great, you're the best smile.gif
SoFlaChris
QUOTE (bethabelle @ May 29 2007, 12:34 PM) *
thanks convict!
I too was struggling with enabling my ssl - thanks for posting some info on how to check it first before going ahead and enabling!

worked great, you're the best smile.gif



Ditto! I was busting my head on this. Thanks!
timreichhart
I cant get my SSL to work at all.
Brivtech
QUOTE (timreichhart @ May 29 2008, 06:12 AM) *
I cant get my SSL to work at all.


That's not much use to us when trying to resolve a problem. Detail will be your friend, otherwise, I'll resort to asking something like "have you tried turning it off and on again?".
timreichhart
what information do I need to give you?
server info?
mysql info?
Version of Cubecart?
and yes I have tried turning SSL on and off and when I try it to turn it on It doenst work.
Brivtech
Well, more specific to the actual SSL problem:

- SSL configuration information like in the first post in this topic
- Hosting Company
- Type of SSL (Shared, Dedicated, Turbo, Rapid, etc.)
- The error you're getting

wink.gif

Please don't post passwords - We never need them, and will never ask for them.
timreichhart
Server Software:Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.1 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
I am hosting the website on a old pc
and I am using OpenSSL
and everytime I try to log in to admin under SSL I get a 404 but I never had any problems under oscommerce running ssl just this cubecart.
timreichhart
no help now?
convict
I assume you did not turn the SSL to YES in CubeCart admin, did you?

What are the differences in URL on result page you tried to login to admin side? I mean http: vs. https access.

If you would like to browse your store with disabled SSL in CubeCart admin you must have the proper SSL settings in CubeCart admin set. Any wrong setting produces some mess like your one.

There are some useful articles about SSL:

https://support.cubecart.com/index.php?_m=k...=24&nav=0,2

https://support.cubecart.com/index.php?_m=k...=35&nav=0,2

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.