Post by xairflyer » Thu Oct 26, 2017 11:32 pm

How do I change my site to https, I thought opencart being a e commerce site it was already secure ?

Active Member

Posts

Joined
Sun Jan 11, 2015 8:58 am

Post by EarthDawn » Fri Oct 27, 2017 8:16 pm

You need to buy and install an SSL certificate either yourself or through whoever hosts your servers.

Newbie

Posts

Joined
Fri Oct 27, 2017 3:12 am

Post by MrPhil » Fri Oct 27, 2017 9:38 pm

Either way, your host has to install your SSL certificate, so you'll have to get them in the loop (they may or may not sell certs, too). Note that many hosts are starting to provide SSL free of charge, to all customers, so check first if that's about to happen.

Regarding the assertion that "it's already secure", OpenCart is not a service that your are buying into. It's software that you need to install on your own server. SSL support is available (built in), but you are still responsible for obtaining SSL for your site.

User avatar
Active Member

Posts

Joined
Wed May 10, 2017 11:52 pm

Post by xairflyer » Wed Nov 01, 2017 2:36 am

Thanks for replies so when I buy a cert and my host installs it, thats it my site will now be https ?

Active Member

Posts

Joined
Sun Jan 11, 2015 8:58 am

Post by straightlight » Wed Nov 01, 2017 2:48 am

Take note that free provided SSL certificate can be part of self-signed certificate strategies which payment and shipping providers may decline. Ensure to ask your host provider that, if it is a free-offered certificate solution, it is not a self-signed certificate since you are planning to sell products and services online.

Dedication and passion goes to those who are able to push and merge a project.

Regards,
Straightlight
Programmer / Opencart Tester


Legendary Member

Posts

Joined
Mon Nov 14, 2011 11:38 pm
Location - Canada, ON

Post by Dhaupin » Sat Nov 04, 2017 2:04 am

xairflyer wrote:
Wed Nov 01, 2017 2:36 am
Thanks for replies so when I buy a cert and my host installs it, thats it my site will now be https ?
1) Get an SSL certificate from your host for both the www and non-www version of your domain. They should offer free ones through either LetsEncrypt, cPanels Comodo. Else, pay for one :)

2) Make sure they work by visiting https://mysite.com and https://www.mysite.com

3) If they are not already, change your Opencart urls to use https:// in both config.php's and any multistore settings

4) In Opencart settings, navigate to the "server" tab and enable the SSL for checkout and account areas.

5) Go through account and checkout and see if things are https://

That is only part of it. If you want to enforce SSL for every page on your store and admin, you can either attempt to do this with server side redirects, or use an opencart mod.

If youre interested, we have a mod just for this purpose, its called SSL Everywhere. It repairs a bunch of things in Opencart, then forces https all over your store so you dont have to worry about it:

For 3.x - https://www.opencart.com/index.php?rout ... n_id=32053
For 1.5.x - https://www.opencart.com/index.php?rout ... n_id=19396

https://creadev.org | support@creadev.org - Opencart Extensions, Integrations, & Development. Made in the USA.


User avatar
Active Member

Posts

Joined
Tue May 13, 2014 3:45 am
Location - PA
Who is online

Users browsing this forum: Amazon [Bot] and 121 guests