ssl url problem

[AndiC]

my set up is currently

/cgi-bin
/httpdocs <- http
/httpdocs/acatalog <- catalog
/httpsdocs <-https

the checkout works with https as the cgi-bin can be accessed
form both http and https.

However, graphics can not be fould they point to
https://mysite/acatalog of course this does not work
as there are in /httpdocs/acatalog which would be http://mysite/acatalog.

if i try to change the catalog url in ssl network settings to
http://mysite/acatalog it just changes to https://mysite/acatalog

am i going to have to copy these files across?

as fars as i can see only the cgi-bin realy needs to be accessed via https to make it secure.

regards

AndiC

[AndiC]

oh yes

the css files will also be missing as well as included javascripts
as they only state a file name in the source i guess i will have to copy them across?

is there not away to get actinic to place the files where need?

AndiC

[Pneumatus]

Just a thought... You set SSL on in Business Settings, then 'Configure SSL Settings' - All your normal details are in the first tab... go to the SSL tab and fill in the details as if you were using /httpsdocs instead of /httpdocs

Matt

[AndiC]

i did that now the whole site will not work :confused:

it does not put anything into httpsdoc :confused:

also under standard i have the setting

FTP

Path from CGI-BIN to acatalog as viewed by ftp server (leave blank uless advised)
= ../httpdocs/acatalog/

this is disabled under ssl surely i would need
to put ../httpsdocs/acatalog/


AndiC

[Darren]

Hi there.

I would suggest contacting your hosting company, and ask them if they can set up a symbolic link from the secure acatalog to the insecure acatalog, that should do it.

[Pneumatus]

Ok... Under you 'Standard' Tab you should have

Catalog URL: http://www.yoursite.com/acatalog/
CGI-Bin URL: http://www.yoursite.com/cgi-bin/
CodeBase: ./
Path From CGI-Bin to acatalog: ../httpdocs

Path to CGI-Bin: /cgi-bin/


Leave the 'as viewed by the web server' one blank

then, in your SSL Tab

Catalog URL: https://www.yoursite.com/acatalog/
CGI-Bin URL: https://www.yoursite.com/cgi-bin/
CodeBase: ./
Path From CGI-Bin to acatalog: ../httpsdocs

Path to CGI-Bin: /cgi-bin/

[Netbit]

I'm having this problem too.

The insecure part of the site works fine, no broken images or anything. But when you go to the Checkout (secure, https) the images are all broken.

Checking out the html source shows that the checkout is trying to reference images from the secure section (https) and not the insecure part (http) where the images actually are.

my server structure:

/httpdocs
/httpsdocs
/cgi-bin

my network settings (standard):

catalog url: http://www.XXX.com/acatalog/
cgi-bin url: http://www.XXX.com/cgi-bin/
codebase: ./
path from cgi-bing to acatalog: ../httpdocs/acatalog/
common settings/website url: http://www.XXX.com/acatalog/
ftp details/path from cgi to acatalog: ../httpdocs/acatalog

my network settings (ssl):

as standard but with https instead of http and "ftp details/path from cgi to acatalog" is greyed out.


Business Settings:

ssl
checkout pages and customer login only

[Netbit]

Pneumatus, i tried your suggested settings but Actinic auto changes the "Path From CGI-Bin to acatalog" to what i've given.

[AndiC]

We have exactly the same problem

[Pneumatus]

I can't seem to replicate you having details greyed out... when I switch to the SSL tab, the only details I have greyed out are 'Path from cgi-bin to acatalog directory as viewed by the FTP server'.

[Pneumatus]

Proof attached :)

(set to ../httpsdocs/acatalog/ there and ../httpdocs/acatalog/ in the standard tab)

[Netbit]

Yup, thats exactly as I have it. -we are talking about the same field thats greyed out. I also have data in the common settings/website url, as described above.

Somehow we need to figure out how to get the pages on the secure (httpsdocs) section of the site to reference its images on the insecure (httpdocs) section of the site

hmm..

[Darren]

Hello there.

I made a posting earlier on, it has been a busy thread so it was easy to miss.

I suggest contacting your host. They may be able to set up a symbolic link from the secure acatalog to the insecure acatalog. This means when you are browsing to https://mysite/acatalog, it is sourcing the files from the httpd/acatalog folder.

Hope this helps.

[Netbit]

I'll get onto the webhost.. however, we should be able to get this working without their help assuming that we've done everything right.

v7 is pretty new isn't it? perhaps its a bug?

[Pneumatus]

The only implication of that is that you will have all of your catalog pages available over https:// - that means that if someone stumbles across your site on https://, you may have some 'insecure' pages that will cause problems for users getting the insecure content warnings.

[Darren]

v7 is pretty new isn't it? perhaps its a bug?

Actinic is basically working as designed. Nothing actually gets uploaded to the 'secure' acatalog folder. In cases where the host has set http and https to be in the same ftp root, this is fine. However, in a setup such as yours with the http and https in separate ftp locations a link needs to be set up between the two by the host.

Hope this clarifies things.

[Netbit]

Originally posted by Darren
Actinic is basically working as designed. Nothing actually gets uploaded to the 'secure' acatalog folder. In cases where the host has set http and https to be in the same ftp root, this is fine. However, in a setup such as yours with the http and https in separate ftp locations a link needs to be set up between the two by the host.

Hope this clarifies things.

thanks for helping to clear things up...

just one thing, you say that having the http and https in the same ftp root would be fine, isn't that what i have? -im getting confused with that and 'seperate ftp locations'.

my directory structure is:

[ftp root]: /
[http folder]: /httpdocs
[https fodler]: /httpsdocs
[cgi-bin]: /cgi-bin

-one root, with subdirectories.

[Darren]

Hi there.

Don't worry, servers confuse me too:)

What I was trying to say (badly!) is that on some servers, the httpdocs (or equivalent) is used for http and https. There is only one web root' folder for the secure and insecure areas.

Yours is not like this, you have one folder for https, and one folder for http. Although your cgi-bin would appear to be shared between http and https.

Hope this helps.

[AndiC]

darren

my host simply.com that claim that actinic runs on there systems
, so far i have had loads of problems!


replied

"We do not create symbolic links on shared servers"


can i move the

images files need
css
js

files to /https/acatalog/

will this work okay?

do any other files need to be moved

regards

AndiC

[Darren]

Hi there.

Copying the css, js and any images referenced should do the trick.

Hope this helps.

[AndiC]

seems to do the trick!

Thanks


AndiC

[Darren]

:) Great news!

Don't forget that if you change any images on checkout, or if you upgrade Actinic. You will need to copy the files across again.

[afm]

Hi - would like to reopen this issue please. I've just installed ssl and I have an http dir and an https dir. The checkout works fine, padlock shows and all that, but the images and css don't show/work. When I look at https dir with an ftp client there is not acatalog subdir.

I don't mind manually copying jpgs and css files over, but do I have to create an acatalog directory first?

Any help would be appreciated. I got the ssl to keep customers happy that their details are secure, but I didn't want to penalise them with an ugly checkout page!

[afm]

I've manually created an https://www.mydomain.com/acatalog directory and uploaded the company logo, actinic.css and a couple of other images.

The checkout page looks a lot better as the logo is now showing. BUT the css doesn't seem to have kicked in because I'm not getting the font and size I've set previously.

Is there a different template for checkout pages using ssl?

[afm]

After a considerable amount of searching I finally found the answer to my ssl problem on this thread (http://community.actinic.com/showthread.php?t=15695)

As it was the early hours of Sunday morning I was rather grateful to say the least and now I have my checkout pages fully ssl'ed and matching the layout of everything else.