Posting in the Magento forums has been disabled pending the implementation of a new and improved forum solution which should better serve the community.

For new questions please post at magento.stackexchange.com, the community-run support site for the Magento community. We will be providing updates on the new forum solution soon. For questions or concerns please email community@magento.com.

Magento Forum

Page 1 of 2
SSL
 
Chuck261
Jr. Member
 
Total Posts:  8
Joined:  2009-02-14
 

How do I determine which pages of the site are put into the “SECURE” folder? OR should I put the entire site there? I purchased a SSL Certificate from Rapid SSL. Installed it on my site, but what is next? I am a novice a e-commerce so any help would be greatly appreciated.

Thanks,

Chuck

CPRsigns.com

 
Magento Community Magento Community
Magento Community
Magento Community
 
Vincèn
Sr. Member
 
Avatar
Total Posts:  289
Joined:  2009-01-03
Grenoble, France
 

Well is it really needed to use SSL if you don’t manage yourself capture of credit card numbers ? Myself I use only Paypal and my bank proprietary system not hosted on my server so all bank aspects are out of my server so I don’t use SSL !

Vincèn

 
Magento Community Magento Community
Magento Community
Magento Community
 
Chuck261
Jr. Member
 
Total Posts:  8
Joined:  2009-02-14
 

I am using paypal also, Web Payment Pro, so they never leave my site. So when customers enter there Names, E-mail addresses Etc, it is stored on my server Correct? If it is I would think the safest thing to do is have it in secure folders. I am new to this so if my thinking is not correct please someone let me know. But I would prefer to error on the safe side.

 
Magento Community Magento Community
Magento Community
Magento Community
 
Aspiration Host
Mentor
 
Avatar
Total Posts:  1287
Joined:  2008-05-09
Tampa, FL
 

You can enable Secure URL in Magento by going to Admin --> System --> Configurations --> Web --> Secure URL. In there you can set whether to have the Secure URL enabled for the whole site or for the checkout shopping cart only.

 
Magento Community Magento Community
Magento Community
Magento Community
 
Aspiration Host
Mentor
 
Avatar
Total Posts:  1287
Joined:  2008-05-09
Tampa, FL
 

Double Posting. Please refer to the post above.

 
Magento Community Magento Community
Magento Community
Magento Community
 
Chuck261
Jr. Member
 
Total Posts:  8
Joined:  2009-02-14
 

Thank you JLHC, Which is more preferable just the shopping cart ot the entire site. Or maybe a better question is there any reason to not have the entire site secure

Chuck

 
Magento Community Magento Community
Magento Community
Magento Community
 
jellybabys
Sr. Member
 
Avatar
Total Posts:  208
Joined:  2008-03-25
UK
 

I would say its not the case if you need a SSL on the checkout cart but what your customers expect? if you was going to lose 1-2 customers per day because they expect to see a SSL in the checkout then I would have one for the $35-50 PA.

Its all about gaining trust from customers and then again should you not provide security for their email address and so on?

I would not have it on the entire site (no one does in my business does) nor on the shopping cart, but once the customer get to the checkout bit where they would start to enter details.

As for paypal and google checkout, I agree why should you have one, but then again what does your customer expect?, myself I would have a secure shopping cart just to show trust, but if you think you would lose no customers then why bother?

Hope that helps???

 
Magento Community Magento Community
Magento Community
Magento Community
 
jellybabys
Sr. Member
 
Avatar
Total Posts:  208
Joined:  2008-03-25
UK
 

Double post, magento has a habit of freezing on my computer…

 
Magento Community Magento Community
Magento Community
Magento Community
 
Periculi
Sr. Member
 
Total Posts:  249
Joined:  2009-02-03
 

I don’t see that you can actually set particular pages or site wide secure pages defined anywhere, JLHC. 

I haven’t set SSL up yet, but from looking at the admin configurations it doesn’t appear that there are a lot of options for picking and choosing which parts of the store to use SSL in.  In fact, it’s looks to be either an on or off situation only, and seems to be lacking any way to define which pages are going to be secure. 

I hope I am actually missing the configuration here, because I do need to be able to define my own secure pages/area on a project and this topic has brought the ‘soon to be a big problem’ to my attention. 

Of course, installing the entire store under https would give you site-wide security at the cost of performance (already a problem without SSL thrown in), otherwise you turn on secure front end pages and the typical customer info areas and checkout go to secure pages, and the admin panel if set up that way, which also takes the performance hit.

 
Magento Community Magento Community
Magento Community
Magento Community
 
Chuck261
Jr. Member
 
Total Posts:  8
Joined:  2009-02-14
 

So the reason not to have the entire site secure is for performance reasons. I was wondering that because the cost of a SSL Cert from Rapid is less than $20.00 a year. Is it a huge hit on performance or is it negilgable?

 
Magento Community Magento Community
Magento Community
Magento Community
 
Aspiration Host
Mentor
 
Avatar
Total Posts:  1287
Joined:  2008-05-09
Tampa, FL
 

@Chuck261: I advise you to have Secure URL enabled for the checkout page only as having it storewide may degrade performance and loading speed.

@Periculi: You can set up Secure URL for the whole store by using https:// for your “Unsecure URL” as well. wink

 
Magento Community Magento Community
Magento Community
Magento Community
 
Chuck261
Jr. Member
 
Total Posts:  8
Joined:  2009-02-14
 

Okay, so I am a little slow… I found where the setting for secure pages are but i don’t see anywhere to enable secure checkout cart?

Help!!!!!!!!!!!!

 
Magento Community Magento Community
Magento Community
Magento Community
 
dhanashri
Jr. Member
 
Total Posts:  24
Joined:  2009-01-08
 

I am having the same problem as Chuck261 I cannot find where to enable secure checkout cart. In the Admin --> System --> Configurations --> Web --> Secure all I have is Use Secure URLs in Frontend and Use Secure URLs in Admin what should i enable to enable secure checkout

 
Magento Community Magento Community
Magento Community
Magento Community
 
Periculi
Sr. Member
 
Total Posts:  249
Joined:  2009-02-03
 

That’s because there is only one option.  If you set Use Secure for the frontend, then the customer account pages, checkout, login areas that Varien decided should be secure are set to use secure.  And apparently you need to put another entire magento file set to get it to work.  There are no configuration options for particular pages at all.  You cannot just enable a secure checkout page.  You cannot add certain CMS pages to the secure areas list from the admin.  To enable security for the entire site, you have to change the base url of Unsecure to be https:// which is not really that great of an option.

You can enable Secure URL in Magento by going to Admin --> System --> Configurations --> Web --> Secure URL. In there you can set whether to have the Secure URL enabled for the whole site or for the checkout shopping cart only.

(my emphasis)
This is not correct.  You cannot select anything other than On or Off for the frontend Use Secure Urls.  And to get magento to run fully secure you would need to set Admin-->System-->Configuration-->Web-->Unsecure Urls to all be the secure installation.

 
Magento Community Magento Community
Magento Community
Magento Community
 
Chuck261
Jr. Member
 
Total Posts:  8
Joined:  2009-02-14
 

thank you very much!

So if I understand this correctly, I have to place a copy of the entire Magento folder in the secure folder as well, Is this correct?

Chuck

 
Magento Community Magento Community
Magento Community
Magento Community
 
Periculi
Sr. Member
 
Total Posts:  249
Joined:  2009-02-03
 

I have read that that is not always the case.  I will try to find a link for you.

Hmm.. can you make a symbolic link between the public and private (http and https)?

One way to install SSL for magento.

Here’s another good article about the same process.

 
Magento Community Magento Community
Magento Community
Magento Community
Magento Community
Magento Community
Back to top
Page 1 of 2