SSL - no lock showing

skyline · **SSL - no lock showing -** 04-29-2003, 01:00 PM

Hi All,
I posted at the help desk but thought I'd see if anyone here can help as well. I have SSL installed for one of my accounts ( I purchased the IP and SSL cert). Anyway the cart seeems to work just fine, but I don't get the little "lock" at the bottom of my browser window.

The Url to the page is here: http://www.gardenvalley.com/books.html (select add to cart)

Any thoughs on what's wrong?

TIA
Sky

Jim · 04-29-2003, 01:23 PM

The "s" is missing. It should be https:// So that you go in over the secure port.

skyline · **SSl -** 04-29-2003, 01:31 PM

Jim,
I do have the "S" on the add to cart link.

Click the add to cart and you will see what I'm talking about.

I'm calling the cart this way:
https://gardenvalley.com/cgi-bin/mcart/mof.cgi

Jim · 04-29-2003, 01:42 PM

Either the config file is set up using the http instead of https where URLs are set or you aren't using the full secure url which is www.gardenvalley.com (must have the "www")

It could be something else but the script is putting out the error page in http, which is why the lock isn't showing up.

boxcar · 04-29-2003, 01:49 PM

The add to cart link worked fine for me. Too good in fact, it had me up to 98.00 in nothing flat.

The security cert was installed and the lock closed. However, the view cart link at the bottom of the page was broken.

Looks like the cert is working. At least here it did.

skyline · **SSL -** 04-29-2003, 02:01 PM

Jim,
I'm not sure I understand, should the full URL to the check out be: https://www.gardenvalley.com/cgi-bin/mcart/mof.cgi?
I do not have it refrenced this way now

I think I'm confusing this with the secure root Url, which is:
https://gardenvalley.com/
Correct?

Boxcar :: Thanks for the heads up. The view cart is still referencing the Old server's URL (Affordablehost) Yikes! - Gotta fix that!

TIA
Sky

stratplan · **don't want to muddy the water, but.... -** 04-29-2003, 02:07 PM

just a suggestion on the reference call: when you get it figured out, make sure it is named the same as SSL cert; here's what I got
http://www.stratplan.com/images/gardenssl.gif

Jim · 04-29-2003, 02:09 PM

Yes, the certificate is on www.gardenvalley.com and any other URL will put up at least an alert that the URL doesn't match the certificate. Trying to call https://gardenvalley.com alerts the user that something is up but it will still encrypt the data. What it does to the script - I can't say.

stratplan · **maybe I did muddy it... -** 04-29-2003, 02:18 PM

If I call the site with:
https://www.gardenvalley.com/

I get a lock.

If I call it with :
https://gardenvalley.com/

I get the warning above.

So, if you use https://www - you should be OK.

skyline · **Getting clearer -** 04-29-2003, 03:06 PM

Okay, I think I have it fixed now --

I'm not getting any errors and the lock shows up when you press the Check out button.
Hate these D*** scripts...

Thanks guys for all your help. I'm never moving this account again!

Jim, I'll go in and close the help desk ticket.

Strat, if you get a chance can you check it one more time?

stratplan · **well, here goes.... -** 04-29-2003, 04:05 PM

I entered with http://www....then go to books, then add to cart:
when I try with Netscape 7+, I get the lock with a red slash.
when I try with MSIE 6, I get the lock after a warning 'wrong name'
when I try with Opera 6, I get a lock after a warning.

I enter http://garden.... as above and it works fine as above. When I go back to 'home' it kicks off the lock. Home is www., and cart is plain garden.

I think only the most paranoid will not go ahead - they should know garden and www.garden are the same. too bad you can't just put the cart in www and call it there.

BTW - nice site. I even searched to find a rose I want (Paul McCartney) but no luck. And I re-learned about comodo SSL certs. Thanks.

skyline · **Clear as mud now... -** 04-29-2003, 04:47 PM

Well... I'm calling the script exactly like the doc's say to.

I tried changing it to https:// to call the mof.cgi script, but I get an error.
What I missed was you _have_ to call the mofPAY.cgi script with the https://www. (Jim actually pointed this out as well)

I'm sure there is a way to make it work without the warning, but I'm too burnt out on it right now. I ran it under a shared SSL on Ah's site and never had a warning problem. But the, it wasn't my cert.

The docs are here: http://www.merchantorderform.com/Doc...tallation.html -- Just in case you're bored

Paul McCartney Rose - Actually it's The McCartney Rose. More info here:
http://www.helpmefind.com/sites/rrr/pl.php?n=6245

We had it bareroot, but sold out quickly...