Home » Forums » Ubercart » Support

SSL for checkout page?

Submitted by jimi089 on Sat, 09/15/2007 - 09:36
jimi089
Posts: 104
 Joined: 09/07/2007
Uber Donor

Greetings,

For my checkout page, my only method of payment is going to be CC > Authorize.net

Since the CC# and info is being entered on my page, I assume I should make this page secure.

The server the site is on is a shared server, so they have a shared SSL that you can use by utilizing a https://domain/~username/ configuration.

Is there any way to do this in Drupal/Ubercart just for the checkout pages easily? I tried using Securepages but unless it's more configurable than I saw, I don't think it's the answer.

I can also purchase an SSL certificate for $75/year from the server - is that a steep price? I can see if I can get my client to bear the burden. Is that a better solution?

Thanks for your help - I did a search but didn't see anything specifically relating to this type of situation.
permalink #1 Mon, 09/17/2007 - 13:53
jimi089
Posts: 104
 Joined: 09/07/2007
Uber Donor

Giving this a Monday bump - thanks for reading.

permalink #2 Mon, 09/17/2007 - 15:40
Andy

Posts: 151
 Joined: 08/07/2007
AdministratorNot Kulvik

$75 / year is to much in my opinion. You can buy one from Go Daddy for $18 for two years here: https://www.godaddy.com/gdshop/ssl/ssl.asp

I would take another look at sercure pages. I think it does exactly what you need.
Peace,
Andy

permalink #3 Mon, 09/17/2007 - 19:22
jimi089
Posts: 104
 Joined: 09/07/2007
Uber Donor

Thanks for the info Andy. I'll take another look at secure pages, and for the info about the certificate.

Smiling

permalink #4 Thu, 09/20/2007 - 13:17
jimi089
Posts: 104
 Joined: 09/07/2007
Uber Donor

It looks like Secure Pages is currently working on integrating shared ssl, if anyone else has the same issue I do, but it will require some customizing before installation. I'll post details here when I find out exactly what it entails.

permalink #5 Sun, 09/23/2007 - 15:16
jimi089
Posts: 104
 Joined: 09/07/2007
Uber Donor

FYI, I caved and got a certificate which made life much, much easier.

Smiling

permalink #6 Mon, 09/24/2007 - 01:44
druru
Posts: 116
 Joined: 08/08/2007
Brain Stormer

Are you saying you simply set up the entire site as SSL protected versus specific pages?

I would think that now that you have your ssl cert you can specify which site pages you want protected. SSL consumes lots of resources and will drag the performance of your site/server down (assuming you have lots of traffic). From what i understand, it's better to use it only where you need it. However, it's also more difficult to set up that way.

I was trying to get creative with ssl and vhosts which they say can't be done but i believe can if you read through the documentation. I tried apache rules as well as secure pages module and i couldnt' get it to work reliably so i just canned it for the time being.

I was hoping you were going to use secure pages so you could share your results.

oh well Smiling

permalink #7 Mon, 09/24/2007 - 14:31
jimi089
Posts: 104
 Joined: 09/07/2007
Uber Donor

Hi Druru,

No, I'm still using securepages to define which pages I want secure, which it does very well and very easily I might add. I just gave up on doing it with a shared SSL environment, because that was giving me a headache.

What problems were you having with securepages?

Take care,

jimi

permalink #8 Wed, 09/26/2007 - 16:10
druru
Posts: 116
 Joined: 08/08/2007
Brain Stormer

Too detailed and not worth mentioning here because it had to do with the way i configured apache which was pretty "cutting edge" for lack of a better term.

Qs for you:

If i recall, 2 things i "think" i remember when i was trying to setup securepages (correct me if i am wrong):

1) there were no instructions period

2) there are limitations to using secure pages with drupal caching. I think it simply doesn't work. all the more reason to confine secure pages to only the paths you want.

permalink #9 Sat, 02/16/2008 - 19:02
zareen

Posts: 24
 Joined: 01/20/2008

Did anyone ever figure out how to use securepages with a shared ssl? I need to do it really quick.
Connie

permalink #10 Sat, 02/16/2008 - 21:20
worthyb

Posts: 21
 Joined: 11/21/2007
Bug Finder

Update - My error is actually with the encryption process. I didn't realize it hadn't been logging the errors before.

--

Changing life as we know it, through the love, loyalty, and friendship of Jesus Christ.