Important Notice from AspDotNetStorefront
It is with dismay that we report that we have been forced, through the action of hackers, to shut off write-access to this forum. We are keen to leave the wealth of material available to you for research. We have opened a new forum from which our community of users can seek help, support and advice from us and from each other. To post a new question to our community, please visit: http://forums.vortx.com
Results 1 to 15 of 15

Thread: SSL issues

  1. #1
    OmegaSpeed is offline Junior Member
    Join Date
    Jun 2009
    Posts
    20

    Default SSL issues

    I am having some issues with the SSL.
    UseSSL and LiveServer AppConfigs are both correct, and I have the Site Config Wizard "Use SSL" to "Yes."
    I check the SSL, and it is installed/working correctly.
    http://www.sslshopper.com/ssl-checke...otorsports.net

    Yet, I still get the "you site is not using SSL" error on the homepage, and the site never goes to https://

    Now, I can hard-code a link it to use https:// and it works correctly. But, otherwise, it won't use the SSL.

    Any ideas what I might be missing?

  2. #2
    harsha.gus is offline Senior Member
    Join Date
    Mar 2009
    Posts
    301

    Exclamation same issue

    I have the same issue, trying to find some help.
    let me know if you git yours fixed.

    thanks
    rbgx
    AspDotNetStorefront ML
    v8.0.1.4

  3. #3
    ASPAlfred is offline Senior Member
    Join Date
    Nov 2007
    Posts
    2,244

    Default

    I don't see this issue in my stock copy. What version are you on?

    I've verified your site and I can invoke https just fine, however, I was able to verify that it won't redirect automatically on secured pages. That should suppose be resolved by setting appconfig: UseSSL to true. What custom changes you've made to the site?

  4. #4
    AspDotNetStorefront Staff - Nicole is offline Administrator
    Join Date
    Jan 2010
    Posts
    41

    Default

    Have you tried checking the AppConfig UseSSL? In some versions of AspDotNetStorefront I've seen the Configuration Wizard not save values correctly to the AppConfigs. I'd check there first, and set the AppConfigs manually rather than through the wizard.

  5. #5
    harsha.gus is offline Senior Member
    Join Date
    Mar 2009
    Posts
    301

    Exclamation i checked

    I checked it, actually

    when i set appconfig for useSSL true and when i click site configuration wizard in admin, they i see use SSL is checked as Yes.
    But if i click on Submit, then it give me this error No SSL certificate was found on your site. Please check with your hosting company! You must be able to invoke your store site using https:// before turning SSL on in this admin site!

    and appconfig for useSSL will turn to false automatically.

    i know my website loads fine with https://, my website goes to https when customers are in shoppingcart page.


    but still this error confusing me.

    apart from the above issue, if i see in Mozilla, my sll gives a warning message saying this website is partially encrypted and not sure why is this happening.

    any idea.

    thanks
    rbgx
    AspDotNetStorefront ML
    v8.0.1.4

  6. #6
    Richnyc30 is offline Senior Member
    Join Date
    Mar 2009
    Posts
    340

    Default Ssl

    Check to make sure the intermediate certificate is installed. I would also reinstall the SSL certificate.

  7. #7
    harsha.gus is offline Senior Member
    Join Date
    Mar 2009
    Posts
    301

    Exclamation whats is intermediate

    What is intermediate, how can i reinstall it, can you please explain it. thanks
    rbgx
    AspDotNetStorefront ML
    v8.0.1.4

  8. #8
    Richnyc30 is offline Senior Member
    Join Date
    Mar 2009
    Posts
    340

    Default intermediate certificate

    Your server has to have an intermediate certificate to make the SSL work properly. The message you are getting was the indication I had it was not installed.

    I had installed an intermediate certificate for Network Solutions, but I also had a SSL from GoDaddy and forgot I needed their intermediate.

    You have to open up the MMC and add it there. The SSL provider also sends you the file for the intermediate certif.

    Call tech support for the SSL and the will walk you through it. Not real hard, but tricky.

  9. #9
    AspDotNetStorefront Staff - Nicole is offline Administrator
    Join Date
    Jan 2010
    Posts
    41

    Default

    Connection partially encrypted could mean that you have non-secure content on your pages. Check for flash objects and Analytics code, anything referencing an object (usually off-site). For any on-site links, you should use relative urls (i.e. use src="/path/to/file.jpg" rather than src="http://yourdomain.com/path/to/file.jpg"). For Analytics, Google Analytics offers an SSL version of their script so it will work on http or https.

    harsha.gus: I checked the site in your signature that's having this problem and it's using a Starfield SSL. Your host might not be set up to support this SSL, you might try a bigger name, like GoDaddy or Network Solutions. In order to install an intermediate certificate you'll have to have dedicated access to your server, or you'll need your host to install this for you. If they can't/won't, switching to another SSL provider might be the only solution.

  10. #10
    OmegaSpeed is offline Junior Member
    Join Date
    Jun 2009
    Posts
    20

    Default

    I have tried all of that, and my host is saying the intermediate certificate works, shown in this link:
    http://www.sslshopper.com/ssl-checke...otorsports.net

    "The certificate should be trusted by all major web browsers (all the correct intermediate certificates are installed)."


    Also, since the site works using https:// is shouldn't be a problem with the certificate.

    Is there anything I can do to fix it? It is a bit disconcerting that the SSL is installed correctly, yet it isn't working like it is.

    Thanks in advance.

  11. #11
    AspDotNetStorefront Staff - Nicole is offline Administrator
    Join Date
    Jan 2010
    Posts
    41

    Default

    The SSL function is pretty simple in AspDotNetStorefront, and as long as the AppConfigs are set correctly, it should just work. I've never seen this behavior on any sites that I've worked on - and when I have a cache reset usually fixes it. What custom work have you done to your site? I wonder if you've got customizations that affect when https is used?

  12. #12
    OmegaSpeed is offline Junior Member
    Join Date
    Jun 2009
    Posts
    20

    Default

    No custom work (besides templates).
    Reset cache and still no changes.

    Still get the "Admin site is not currently using SSL" message on the admin homepage, even though SSL is enabled everywhere I can find it (appConfig and Site Config. Wizard).

    Still works if I hardcode it to https://
    Still won't automatically switch to htts:// if I don't

  13. #13
    suedeapple is offline Member
    Join Date
    Aug 2010
    Posts
    30

    Default

    Im getting the same issue too.

    The admin will not auto switch to https:// either.

    I have enabled SSL everywhere too.

    On the front end the switching from http to https works fine.

    Can anyone shed any light on this problem/bug?

  14. #14
    allstar is offline Member
    Join Date
    Apr 2009
    Posts
    90

    Default

    ***ASPDNSF SUPPORT please advise***

    I'm having the same issue too. I've also set the appconfig parameter "GoNonSecureAgain" to false. And according to this parameter, it should set all pages to https. This is not working. I've followed the instructions enabling SSL (http://manual.aspdotnetstorefront.com/p-902-ssl.aspx) and certificate is installed correctly. Please shed some light here.
    ...AllStar

  15. #15
    Sir Force is offline Junior Member
    Join Date
    Mar 2012
    Posts
    1

    Default Same problem here - admin does not automatically switch to SSL

    Went live with site - SSL working but ADMIN does not automatically switch to SSL and when not SSL prints the warning Your Admin site is not currently using SSL. This can allow data being sent to and from the admin site to be read in transit. Click Here to learn how to enable SSL.

    If I manually enter HTTPS:// on the URL it works great.

    I have changed the directory name and updated the AppConfig accordingly.

    The rest of the HTTPS switching on the main site seems to work as expected and correctly.

    What can I do to help make this as painless as I can for my store admins/owner?

    Thanks