Opencart 1.5.6.4 - Configure HTTP to HTTPS the right way?

Dear all,

Thanks for this great community! Always a lot of good info and solutions to read... But now I need som help regarding my thoughts about changing to HTTPS for my web store.

I have purchased a RapidSSL certificate trough my host provider. I`m using OC 1.5.6.4 with the powerful Pavilion Theme I like. My goal right now is to change the whole web store from regular HTTP to HTTPS. I have been reading so much information but it feels like it´s hard to grab all of the details and info about everything that´s necessary to change for this case.

What do I need to think about? I have tried to look at this a little bit, and not the whole store is using HTTPS yet. I wonder for example about the .htaccess file,I´m using this code below:

RewriteCond %{HTTP_HOST} ^domainname.com$ [NC]
RewriteRule ^(.*)$ http://www.domainname.com/$1 [R=permanent,L]

Is this code correct? I can activate the option "Force SSL" trough my host provider, but is that the right way to do? I´m a little bit of a newbie when it comes to the code settings.

I would be greatful for any advices from all of the expert persons here!

Best regards Thomas

Unfortunately, it takes more than just adding correct LINKING into the config.php files and
the .htaccess file, but I just created a listing with serveral Extensions, for different Versions,
to hopefully 'closing' some default-existing 'https-holes'.
viewtopic.php?f=190&t=171302&p=656833#p656833
I don't use https yet, so, I just dont't know.
Good Luck!
Ernie

Thanks IP_CAM for your reply!

I have always used www for my web shop. I have done the changes in Google Webmaster Tools and in the .htaccess-file with following code:

RewriteCond %{HTTP_HOST} ^domainname.com$ [NC]
RewriteRule ^(.*)$ http://www.domainname.com/$1 [R=permanent,L]

When it comes to HTTPS for the whole store, I know that people add below code in the .htaccess-file. Is this the right way to point HTTPS to the whole site? Can the code below make issues with the other "www code"?

RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R=301,L]

Is it also right to use all of this code to my config.php files in both root and /admin file location?

// HTTPS
define('HTTPS_SERVER', 'https://www.domainname.com/admin/');
define('HTTPS_CATALOG', 'https://www.domainname.com/');
define('HTTPS_IMAGE', 'https://www.domainname.com/image/');
define('HTTPS_ADMIN', 'https://www.domainname.com/admin/');


Best regards Thomas