Redirecting to Non-SSL URLs

For general questions and discussions specific to the AbleCommerce 7.0 Asp.Net product.
Post Reply
ESomething
Ensign (ENS)
Ensign (ENS)
Posts: 6
Joined: Tue Jun 17, 2008 7:36 pm

Redirecting to Non-SSL URLs

Post by ESomething » Tue Jun 17, 2008 7:50 pm

I'm trying to set up AC 7 on a site that uses Apache as its web server.

I have IIS running on non-standard ports (8080 / 8443) and I have set up Apache to serve as a proxy to those ports.

It's all working well except for situations in which AC7 wants to switch users back from https to http. The user is redirected to http://localhost:8443/ContactUs.aspx as an example. I understand why it's doing this... it thinks localhost:8443 is the correct URL.

What I'm wondering is where this redirect function is and can I alter it. Is it in one of the DLLs in /bin? (Hope not.)

Thanks in advance for any help.

-- Ethan

keats76
Commander (CMDR)
Commander (CMDR)
Posts: 117
Joined: Sat Dec 15, 2007 4:45 pm

Re: Redirecting to Non-SSL URLs

Post by keats76 » Wed Jun 18, 2008 9:47 am

I had a similar issue.

Take a look at the ablecommerce.config file in the data directory. There is a listing of secured pages and directories there that you can add to (or remove from) at your pleasure.

ESomething
Ensign (ENS)
Ensign (ENS)
Posts: 6
Joined: Tue Jun 17, 2008 7:36 pm

Re: Redirecting to Non-SSL URLs

Post by ESomething » Wed Jun 18, 2008 1:10 pm

Thanks, Keats. That file is helpful.

My issue, though, isn't what is called by SSL but the transition from SSL to non-SSL when you go from a checkout page back to shopping.

Now that I think about it, one option would be to have the store run entirely in SSL.

-- Ethan

User avatar
Logan Rhodehamel
Developer
Developer
Posts: 4116
Joined: Wed Dec 10, 2003 5:26 pm

Re: Redirecting to Non-SSL URLs

Post by Logan Rhodehamel » Thu Jun 19, 2008 11:25 am

Bug 6865 was reported a couple of days ago, and in the course of investigation I believe we discovered the problem you are reporting. Since you are working with apache, I think you can probably use this quick info. Pop open the database, find the ac_StoreSettings table. Do you see the field for "SSLEncryptedUri" that has your SSL domain? OK, make a new field using same store ID, field name "SSLUnencryptedUri" and field value of your standard (non-SSL) domain. After that, I believe it will switch back to non-SSL context correctly.
Cheers,
Logan
Image.com

If I do not respond to an unsolicited private message, it's not because I'm ignoring you. It's because the answer to your question is valuable to others. Try the new topic button.

ESomething
Ensign (ENS)
Ensign (ENS)
Posts: 6
Joined: Tue Jun 17, 2008 7:36 pm

Re: Redirecting to Non-SSL URLs

Post by ESomething » Thu Jun 19, 2008 12:27 pm

Hi, Logan--

Thanks for the response. I tried it but it doesn't seem to work. Is there a patch I need to download to get the code to recognize the SSLUnencryptedUri variable?

-- Ethan

User avatar
Logan Rhodehamel
Developer
Developer
Posts: 4116
Joined: Wed Dec 10, 2003 5:26 pm

Re: Redirecting to Non-SSL URLs

Post by Logan Rhodehamel » Thu Jun 19, 2008 1:04 pm

Hello Ethan-

Can you access this link: http://bugs.ablecommerce.com/show_bug.cgi?id=6865

The patch is attached to this bug report. Follow the posted instructions and please post back here the result.
Cheers,
Logan
Image.com

If I do not respond to an unsolicited private message, it's not because I'm ignoring you. It's because the answer to your question is valuable to others. Try the new topic button.

ESomething
Ensign (ENS)
Ensign (ENS)
Posts: 6
Joined: Tue Jun 17, 2008 7:36 pm

Re: Redirecting to Non-SSL URLs

Post by ESomething » Thu Jun 19, 2008 1:28 pm

Thanks, it works!

That was our last big hurdle. I'm pretty confident that our client will be buying two licenses!

-- Ethan

Post Reply