Author Topic: Need help with Shared SSL issue  (Read 9984 times)

Nirm

  • Contributing Developer
  • Full Member
  • *
  • Posts: 919
    • Me, My Work and I
Re: Need help with Shared SSL issue
« Reply #15 on: March 30, 2009, 23:23:31 pm »
i have never replaced the key
A lot of questions are answered in the VM 1.1 User Manual please read it before asking questions.
-------------------------------------
http://www.nirmoysomaia.com

nryan115

  • Beginner
  • *
  • Posts: 40
Re: Need help with Shared SSL issue
« Reply #16 on: April 01, 2009, 04:42:06 am »
Hello!!!! I am entirely sorry that I have not been able to be more active in this thread.

For starters let me say that I am not using any 3rd party sef or anything like you are - so hopefully people wont blame your problem on that - since I have the same problem.

Also, my secure url is working flawlessly, I am able to type in manually my secure url and get the page / site to work fine using it, so hopefully people wont say 'make sure your url is setup right with your host'. I know mine is, I can type the secureurl in manually and it loads correctly.

As for forcing the site to go into secureurl - it is completely a hack of the code I did while testing and trying to debug the problem. It was NOT in anyway a fix or solution. That having been said, there IS a bug arround that area, I just couldnt find it. One of the functions that checks for shared ssl i dont think is returning the correct answer and that is what I hacked. Let me explain:

I spent many many hours reading and trying to understand the code. After reading virtually every file with "checkout" in its name, I found out that when you are using shared ssl, the most important part of switching to the HTTPS domain is the transfer of the session data. It turns out that session.php loads on every page load, and handles not only the session, but also grabs the url, changes it, checks things, cleans it up again, and then continues loading the next page. I chased the problem into that file (I am pretty sure)

I spent several hours reading through session.php (/administrator/components/com_virtuemart/classes/session.php). After spending alot of time I understood the basics of what was going on and tried to debug the code. The problem is that the logic worked out fine for me - assuming the functions worked correctly, the logic of the IF statements should work.

To be honest, i dont remmeber what i did - and after it didnt work out in the end I delted my modified file, however, i can tell you the gist of what I did. The session.php file tries to detect if you are using shared ssl and if you are it coppies session data, spurts some info about the mart id into the url, performs same magic and then re-cleans up the url. (sorry but I had to summarize). This seemed like the perfect place to find the issue because the URL I end up at, is not the same as the URL i want to be at. Hours of debugging later, and it seemed to me that there was an IF() statement that was failing when it should have been entering in - something roughly like, if(secure && redirected && force_hhtps) but for some reason it kept skipping it (even though I met the conditions, and the functions it relied on seemed correct too. So I just hacked in and forced redirected to be true (or whatever was needed) and the result?

Well it resulted in the site going into SSL (YAY) but still was redirected to the wrong page (crap, same problem). Thats when I gave up. I spent a hundred  hours trying ot learn php and this code - neither of which I was familiar with, but HONESTLY i understood it durring those couple of days - but unfortunately that was 3 weeks ago and i completely forgot it all. If it helps at all (which i know it doesnt) i believe the hack I did was inside the function after the comment "This is part two of the function". The other problem was that the hack forced ssl ALL the time (durring checkout). Instead of checking your configuration. Trust me. It was NOT a solution.


Anyways, Its been a few months now and I still have no idea what is going on.

Nirm

  • Contributing Developer
  • Full Member
  • *
  • Posts: 919
    • Me, My Work and I
Re: Need help with Shared SSL issue
« Reply #17 on: April 01, 2009, 07:49:36 am »
i think it is important to keep this thread alive because if there are many people experiencing this problem then it should be resolved. it may be worthwhile pooling resources and hiring a developer - i have used some from this forum and they are all experts and excellent. - Mark Callf, Joseph Kwan.
A lot of questions are answered in the VM 1.1 User Manual please read it before asking questions.
-------------------------------------
http://www.nirmoysomaia.com

nryan115

  • Beginner
  • *
  • Posts: 40
Re: Need help with Shared SSL issue
« Reply #18 on: April 01, 2009, 17:25:55 pm »
if it means anything, my domain is NOT https://www.mydomain.com
It is closer to this: https://shared-ssl.secure.net/mydomain.com

I dont know if that makes a difference.

XiRoCCo

  • Beginner
  • *
  • Posts: 5
Re: Need help with Shared SSL issue
« Reply #19 on: January 27, 2010, 20:47:40 pm »
Has any progress been made on the use of Shared SSL in VM/Joomla?  I have the same problem as has been reported all over these forums, and simply cannot get the Shared SSL to work. Would love to hear from anyone who figured this bug out.

Thanks

bortolani

  • Jr. Member
  • **
  • Posts: 91
Re: Need help with Shared SSL issue
« Reply #20 on: January 27, 2010, 23:03:04 pm »
Have you checked the parameter livesite in configuration.php?

I believe that with a shared SSL you should leave it blank, otherwise all intenal links will have the livesite prefix and https links will point to non-existant addresses.

Bruno


ace2721

  • Beginner
  • *
  • Posts: 8
Re: Need help with Shared SSL issue
« Reply #21 on: January 28, 2010, 10:59:19 am »
Hi guys I am also having the same problem, Nirm is currently in the process of helping me try to resolve this very common frustrating problem that no one seems to  be able to sort out.

The answer that I seem to keep getting is don't buy a shared ssl

I really hope someone finds a solution as I am going to shoot my self soon

have a nice day guys

Lorrein

  • Jr. Member
  • **
  • Posts: 80
  • Try our boardgame Lorrein. Its fun.
    • www.sensalot.com
Re: Need help with Shared SSL issue
« Reply #22 on: June 16, 2010, 20:43:50 pm »
I have a shared SSL problem to.
www.sensalot.com
https://sensalot-com.firstfind.nl

When all but admin are set to have SSL I can not add a product to a basket. When I have only account set to have SSL I get thrown back to the main page of VM.
Could this have to do with cookies?
Or could it be that VM only changes HTTP to HTTPS and does work with private SSL and not with Shared SSL?
A manual, tutorial of any kind would be very helpfull

I killed my shared SSL and cahnged to private. I hope this will work

Qball

  • Beginner
  • *
  • Posts: 2
Re: Need help with Shared SSL issue
« Reply #23 on: October 30, 2010, 00:20:52 am »
I wanted to chime in with my issues and what I've discovered when using a shared SSL with Virtuemart.  I just setup my first Joomla/Virtumart install a few weeks ago and my company uses a shared SSL provided by our hosting company.  It uses the format of:  https://mydomain.hostingcompany.com/

When I first set everything up I ended up having the issue of items not being able to be added to the cart.  A user would click "Add to Cart" and be directed back to the home page. My configuration initially was:
Site URL:  http://www.mydomain.com/virtuemart
SECUREURL:  https://mydomain.hostingcompany.com/virtuemart

Area's set to use https were account and checkout.  I believe the problem was in using the "www" in the site URL but not the Secure URL.  I've changed my configuration for Site URL to:  http://mydomain.com/virtuemart and people are successfully able to add items to their cart and checkout securely.

I do have a second problem though that I believe is related to the shared SSL as well.  Currently users can not register using the registration page.  If a user clicks the link to "Register", using the login form on the sidebar, they can fill out all their information but when they click "Submit" they are redirected to the site and no new account is created.  When they are redirected it is to the home page using https.  The URL a user is redirected to after hitting submit is:
https://mydomain.hostingcompany.com/virtuemart/index.php?=0&cartReset=N&redirected=1&option=com_virtuemart&Itemid=1

If the user fills out the registration form during checkout then the registration will work fine, I believe because they are already using https at that point.  I believe this is the case because things work fine on my testing server which I have setup to use SSL.  On my testing server I use:
Site URL:  http://127.0.0.1/virtuemart
Secure URL:  https://127.0.0.1/virtuemart
Account registration, checkout, cart, everything works as expected.  Users can register during checkout or not and things are fine.

In case anyone is interested the workaround I'm using to allow the site to work right now is I have turned off the login form in the sidebar.  Not an ideal solution I know as customers can not log in or create an account until they go to checkout, but it does allow the site to function.  I believe if there was a way to have the registration form use https from the start it would work correctly.  The only way I have found to do this so far is to have the shop constantly use https which is not very desirable.
Hopefully some of this info might be helpful.

herzing94vincent

  • Beginner
  • *
  • Posts: 1
    • School
Re: Need help with Shared SSL issue
« Reply #24 on: February 23, 2011, 21:14:50 pm »
nice....