SSL Enable Feature in Ablecommerce Admin

[Carolharry]

Hi ,

We are using Ablecommerce 7.03 and I see SSL Enable feature in Admin. I have enabled it and from then on all pages are served on "https:" . My initial understanding was by turning on SSL the Checkout page will be on "https:" Isn't that true. We don't want to server all pages on" https:" instead do only checkout page. Is there any easy way to do that?
Appreciate any help.

Thank you,
Carol.

[Carolharry]

Can anyone please reply to this post. Any help link or solution.

Thanks in Advance.
Carol

[mazhar]

You need to edit Website/App_Data/AbleCommerce.config file and then remove entries of directories and pages for which you don't want SSL from securePages element.

[Carolharry]

Hi Mazhar,

Thank you for your reply and your solution worked. However this worked on dev server. When I try to enable it on stage we are able to reach our stage url on https:// fine. But when it comes to "Checkout" page...it becomes unresponsive. The "Processing image in Ajax" is "stil" and looks like page is not responding.
This kind of behavior doesn't happen on dev.

How can we solve this. Any ideas?

Appreciate your help in advance.

Thanks,
Carol

[mazhar]

One way to debug this could be to make use of fiddler to see what is been called when checkout AJAX gets stuck.

[Carolharry]

Yes I did that and it calls "stageserver:443" same as "devserver:443" . SSL on both are installed fine. If we try to reach "https://stageserver/anyfolder/anypage.aspx" it works fine .
But if we try to reach "https://stageserver/checkout/default.aspx" it becomes unresponsive and the ping is being done to the same "443".

Thank you,
Carol

[Logan Rhodehamel]

We are using Ablecommerce 7.03 and I see SSL Enable feature in Admin. I have enabled it and from then on all pages are served on "https:" . My initial understanding was by turning on SSL the Checkout page will be on "https:" Isn't that true. We don't want to server all pages on" https:" instead do only checkout page. Is there any easy way to do that?

Let's back up two steps. Why was it doing this? Carol you are correct, enabling SSL from the admin should only result in the checkout / login / admin pages being served under the ssl context. It should not have started serving all pages in https. Perhaps whatever is causing this is also causing the other problem?

Can you copy and paste in here the securePages section from the app_data/ablecommerce.config file? And also, what did you set as your store URL in the admin?

[Carolharry]

Hi Logan,

Sorry for getting back to you this late.
Here's what I have in the config file
<application enableRewrite="true" connectionStringName="" maintenanceInterval="360"
readOnlyInstance="false" viewStateWarning="0" demoMode="false">
<trackPages enabled="true" ignoreHandlers="WithStandardExtensions"
defaultState="On">
<directories>
<add path="Admin" recurse="true" state="Off" />
<add path="Assets" recurse="true" state="Off" />
<add path="ClientApi" recurse="true" state="Off" />
<add path="fckeditor" recurse="true" state="Off" />
<add path="images" recurse="true" state="Off" />
<add path="Install" recurse="true" state="Off" />
<add path="Layouts" recurse="true" state="Off" />
</directories>
</trackPages>
<securePages enabled="true" ignoreHandlers="WithStandardExtensions">
<!--directories>
<add path="Admin" recurse="true" />
<add path="Members" recurse="true" />
<add path="Checkout" recurse="true" />
<add path="FCKeditor" recurse="true" state="Ignore" />
</directories-->
<files>
<add path="Login.aspx" />
<add path="Members/MyWishlist.aspx" state="Off" />
<add path="Members/SendMyWishlist.aspx" state="Off" />
<add path="Admin/Utility/EditHtml.aspx" state="Ignore" />
<add path="Checkout/Default.aspx"/>
</files>
</securePages>
</application>

We still have the same problem.

Appreciate any help.

Thank you,
Carol

[Logan Rhodehamel]

Can you also copy and paste whatever you have set as store url from the admin screen?

[dale.jones]

I'm experiencing similar behavior with some twists. I set up SSL on IIS with a self-signed certificate on my dev machine. I make the edits as advised by Mahzar. Then I can turn on SSL from the store admin page and SSL works when the cart goes to check out.

Different behavior on the staging site. The environment is Server 2008 R2/IIS 7.5. (Version 7.5.7600.16385)

I set up SSL on IIS with a self-signed certificate. I make the edits to ablecommerce.config. From IIS Manager I can browse to the store on ports 80 or 443.

From my workstation, I turn on SSL from the admin page and the verification dialog pops up. I click the link and the connection times out: The server at <store url> is taking too long to respond.

Any ideas?

Thanks in advance.

[dale.jones]

How embarrassing. In order to differentiate staging from prod we're using the IP address for staging. The IP address got changed on the server, but not in the documentation, so I was trying to set this up with the old IP.

Oops. Sorry for the bother.

[Carolharry]

Hi Logan,

i sent you PM with more details about our server and urls.
Thank you,
Carol

[Carolharry]

Hi ,

Can anyone tell me what happens when SSL is enabled and user is trying to launch a page which is under "<secure pages>" tag in "ablecommerce.config". My curiosity is does Ablecommerce see that
SSL is enabled so prefix"https://" to the target page url or ping the site at http://www.xyz.com:443 .
This information will help us becuase we are able to go through all pages on https://www.xyz.com/login.aspx etc.
However when SSL is enabled in ablecommerce and user trying to reach login page it just becomes unresponsive.

We have a webfarm and trying to see if there is a difference in how ablecommerce switches a http:// request to https:// request.

Appreciate it.

Thank you,
Carol

[Carolharry]

Hi

We have our ablecommerce application on a webfarm in stage. I was wondering if "<machine key>" plays a role in Enabling SSL and redirecting all the pages which are in "<Secure pages" in ablecommerce.config on https://.
The reason I am asking is like I said in the above post that after we enable "SSL" we are not able to get out any futher in "Checkout" page. Same happens for "Login.aspx" also.

This has been happening from days and we are trying to troubleshoot.
Pealse post some help link or suggestion.

Appreciate any help.

Thank you,
Carol.