SSL Setup

[Horsing Around]

Although I use 1and1 I'm no great fan of theirs, and no computer genius, however I have just changed our web site hosted by them 1and1 to run using SSL without any real issues.

In Sellerdeck 2016 all I did was change the SSL/TLS setting to use 'Whole Site', on the Payment & Security page. On the Advanced Network Page made sure the store URL starts with https and also on the Company/Contact page made sure the Web Site Address starts with https.

I added the following lines to my .htaccess file:

RewriteEngine On
RewriteCond %{HTTP_HOST} !^www\.yourcompanyname\.com$ [NC]
RewriteRule ^(.*)$ https://www.yourcompanyname.com/$1 [R=301,L]

I then saved this my .htaccess file and then in Sellerdeck 2016 refreshed my website. The only issue I had was the the URL for the Logo, and Home link in the top bar using the HomePageURL variable didn't update to https. I simply removed the variable and pasted in the https path to my website and updated.

Everything appears to be working fine, and orders have come through OK since the update.

Kind regards

MAC.

[MattSMR]

Hi MAC,

For the URL on your logo / home link, use the variable:

SSLCatalogHomeURL OR SSLCatalogURL - depending on where you want traffic to land.

You can wrap these in a conditional statement to appear if fullsite SSL is used or not (if you ever decide to leave SSL(why would you?!))

[Horsing Around]

For the URL on your logo / home link, use the variable:

SSLCatalogHomeURL OR SSLCatalogURL - depending on where you want traffic to land.

Thanks for the heads up Matt...

You would think as the ssl option is there as a choice, so would the conditions in the SellerDeck template!

Kind regards

MAC.

[MattSMR]

Thanks for the heads up Matt...

You would think as the ssl option is there as a choice, so would the conditions in the SellerDeck template!

Kind regards

MAC.

You would... but that would just be logical!

You're welcome for the heads up.. there's a lot of variables - never be afraid to use the help functionality in SD to search for one - you'll be surprised what's out there.

[jtaylor]

Everything appears to be working fine, and orders have come through OK since the update.

Hi Mac,

Justin here from Sellerdeck. Just wanted to point out that your site may isn't defaulting to HTTPS which should now be the norm.

I've visited it via Google and it still goes to HTTP. I've a screenshot, but not sure how to post here!

I also wonder whether you've informed Google not informed Google that it's now HTTPS by default. You'll need to access your Google Search Console to get that element finalised. I think that, as usually within 24-48 hours after an HTTPS change and informing Google, the site would be shown within Google as HTTPS.

Now, you may not care about Google - or you may be in the midst of completing these steps! But I don't want you to lose rankings if this is just a mistake. Best to speak with your SEO company for further advice.

Cheers,
Justin

[Horsing Around]

Hi Justin,

Thanks for the heads up... I think I jinxed everything by posting as it’s only one of the issues that has appeared since setting my web site to run under SSL.

Customers now can’t access online accounts as when they try to log in the perl script starting ‘bb’ refers to my web site using http and not https despite the SSL/TLS setting to use 'Whole Site' causing a “A General Script Error Occurred”. I have pasted a snippet of the url is below:

https://www.horsingaround.com/cgi-bi...round%2ecom%2f...

For the moment I have switched my website back to only use SSL on checkout and this has solved the log in issue.

Any ideas anyone?

Kind regards

MAC.

[Goz]

Have you got any manually created links on your website or are they all generated by SellerDeck?

When setting up SSL on any site I always make sure that the .htaccess file redirects http:// to https://

Typically, the code will look like this :

RewriteEngine on
RewriteCond %{HTTP_HOST} ^yourdomain\.co.uk$ [NC]
RewriteRule ^(.*)$ https://www.yourdomain.co.uk/$1 [R=301,L]

although this is provided for info and with no warranty etc.

[Horsing Around]

Hi Goz,

Thanks for the advice... Yes I had edited my .htacess file, and everything appeared to be working fine until a customer told me they couldn't log in to their account to check an order.

The link is generated by the Sellerdeck perl script i believe, the forwarding page url used http, but the script correctly saw the referring page as https.

I don't know if it one of those Sellerdeck things, but I just haven't got hours to spare banging my head against a wall so it was easier just to go back to using SSL on checkout.

I was hoping that it might be something someone else with more brains than me had come across this problem and solved it!

Kind regards

MAC.