SSL certificate issue/advice :)

Hey Nicolas,

We are having trouble with my site, and my developer has asked me to ask you this:

" We have installed a certificate .... and have turned on SSL at checkout in Hikashop. When we try to check out an item and are on the Firefox browser we get an "unsecure connection" message. Any help in resolving will be much appreciated."

Can I email you or send the domain name via contact form?

Please lets hope you have the answer! lol!

Thanks! :blink:

also, does meandering musings mean anything to you?

Just need to ask something out of curiosity. What about when using other browser like IE, Chrome, Safari and other else out there. Have you encountered the same problem with this? Thanks in advance.

No problem with Firefox in Australia, but an unsecured warning in America. IE also gives an error in America - not tested in Australia. Also, not tested in Chrome.

Any ideas?

Hi,

If your browser tells you that the website is not secure when you're in SSL (HTTPS), it means that there is a resource on our website which is accessed via HTTP instead of HTTPS. That happens when a module/plugin/template doesn't use the joomla routing function when creating the links to the resources it wants to use.
The solution is to look at the source code of the page and see which URL has http instead of https and remove/correct the extension which generates that URL.

Nicolas,

My company is working with the owner on a new site that is using Hikashop. We've installed a certificate (Rochen is our host and confirms it is correctly installed). We tried going to the backend with SSL forced on in server settings and that connected with https just fine. On preview, the site wouldn't show and we thought we might have a component or plugin that is blocking us. As an alternative, we decided to turn off forced SSL in server settings and just turn it on at checkout with Hikashop. When we try to check out a product the credit card entry screen appears but we are not in secure mode.

Any thoughts/help in resolving will be much appreciated.

Don

Hi Don,

The solution is to look at the source code of the page and see which URL has http instead of https and remove/correct the extension which generates that URL. If you want, we can have a look at it but the test account you provided before doesn't work anymore so we can't look at the page.

Nicolas,
Thank you for your reply. I'll send you credentials via private note.

Don

You have the javascript files :
www.google.com/jsapi
ajax.googleapis.com/ajax/libs/jquery/1.2.6/jquery.min.js
platform.twitter.com/widgets.js
which use HTTP instead of HTTPS even when HTTPS is activated.

I had to deactivate the SSL redirect plugin which was disabling the SSL on your website front end in order to be able to test.

Thank you so much for the quick response! So, I need to remove/disable the components or plugins using those files and then either force SSL for entire site or just for HikaShop checkout? Is there a quick and dirty way to match those files to the offending plugin/component?

Thank you again,
Don

Unfortunately no. You need to test each plugin one after another and see if the file is not in the source of your pages anymore.

Nicolas,
Thank you for your reply. We removed a number of plugins that were not being used and we appear to be ok. Currently I have no forced SSL in server settings, only SSL at checkout and when I tested it performed ok. The plugin you disabled is still off, that shouldn't be a problem should it?

How do you work with sh404sef? We may use that and I've had issue with it in the past......

As an aside, my company signed up to be an affiliate today, really like your product and do appreciate your support and professionalism. Thank you.

Don

That's not a problem. HikaShop is compatible with sh404sef. However, we try ourselves to avoid using it as we also had problems with it in the past.