Shared SSL mapping to a different directory

[usbzoso]

Would it be possible to map Shared SSL from .../www/Secure_Server to just .../www directory? If yes how? Thanks for help

[Bob]

Hello,

A shared Certificate cannot be used for any address other than. https://xdomain.MerchantQuest.net/ and is always mapped to the /www/Secure_Server directory as far as placing your secure files.

Even if you obtain a Private Certificate and Order it for www.domain.com, the secure directory will be /www/Secure_Server but https://www.domain.com will map to that directory.

-Bob

[usbzoso]

Then my question becomes is it possible to map the .../www directory to the .../www/Secure_Server so that the default page is located in .../www/Secure_Server/index.php and can be viewed through both secure and unsecure enviroment

Thanks for super fast reply,
Stan

[usbzoso]

just to make things clearer as to why i need this...
i am planning on running an oscommerce on the server, if the secure enviroment is not located in the same directory as unsecured enviroment then i will need to keep two sets of files one in the root www folder and another exact copy of files in the secure_server folder, this makes things more complicated and wastes disk space? any suggestions or workaround?
Thanks,
Stan

[Randall]

I can't remember if the secure directory is accessible in non-secure mode or not, so this might not work, but...

You could try a Redirect in the /www/.htaccess file, something like Redirect permanent /index.php http://example.com/www/Secure_Server/index.php It'll change the browser's address line to the actual URL, so you can't use this to mask the real address.

Randall

[usbzoso]

thats not what i had in mind but thanks for a suggestion i think i'll add that to my last resort options, any other ideas?
Thanks,
Stan

[usbzoso]

i guess the question i need an aswer to is, is there a way to map domain.com to /www/Secure_Server that can be accessed thorugh http://domain.com or thought https://xdomain.MerchantQuest.net/
Thanks,
Stan

[kitchin]

I knew this had come up before:
http://www.aota.net/forums/showthread.php?postid=112646#post112646

But the big question was never answered:
http://www.aota.net/forums/showthread.php?postid=113550#post113550

Not being a unix guru, I would be careful about subdirectories and possible cyclical references!! This is probably an easy one though.

[Terra]

Stan:
Send an email to the Service Desk, noting this particular thread... I want to try something new with the SSL engines, and you are the perfect victim^H^H^H^H^H^Hcandidate for this test...

--
Terra
--technology would not be where it is today without watching lab rats run around in a maze--
FutureQuest

[usbzoso]

Done! I will gladly be your lab rat. Please don't hesitate to ask me if you need anything for this test. I hope your number of posts is in binary, otherwise you must have no life. Hehe

Thanks a ton,
Stan

[Randall]

Done! I will gladly be your lab rat. Be careful what you wish for, Stan. :wink: I hope your number of posts is in binary, otherwise you must have no life. Hehe No, that would be me. :clown:

Randall

# At least it's not hexadecimal

[Terra]

# At least it's not hexadecimal
When you are able to exceed my post count, who knows what earth shattering event will occur... :P

--
Terra
--zero x one zero zero zero one--
FutureQuest

[hobbes]

One possible solution to what you're trying to do (should the guinea pig route be too painful) ...

Install osC to www/Secure_Server/catalog/
SymLink www/catalog/ to www/Secure_Server/catalog/
Redirect www/ to www/catalog/
Properly configure your osCommerce config files

This is what I've done for a client's site just so I wouldn't need two copies of osC, and it has worked well (as long as you don't mind "catalog" or whatever you choose appearing in the URL).

[Snarpy]

Where was I when this came up in January???? I think I'm missing posts using the new posts link. Either that or the post name didn't catch my attention on one of my busy days...

I'm in need of doing this myself right now, except with ZenCart. What is the status of the guinea pig before I proceed to do what hobbes suggested?

Snarpy

[Terra]

What is the status of the guinea pig
Not particularly good... One of their PHP scripts is causing the SSL daemon child to spin... I've been collecting information, but nothing conclusive as of yet as it can take several days to hit the spin... So far it has spun twice, and both on the same script... In fact, I had to kill one of them early this morning...

Spin #1: 2/12/2005
Spin #2: 2/21/2005

In a nutshell:
request --> SSL --> PHP script
PHP script runs, returns results and exits
SSL goes back to main loop and spins for no apparent reason

This one is going to be a tough bug to track down since I cannot force the error, and I also have to be careful not to turn this into a Heisenbug...

--
Terra
--rinse, lather, <insert several days worth of delay>, repeat--
FutureQuest

[Randall]

I also have to be careful not to turn this into a Heisenbug... I had to look that one up. :umm:

http://www.answers.com/heisenbug&r=67 Where was I when this came up in January???? I think I'm missing posts using the new posts link. I haven't used New Posts much -- I find Posts in Last X Days more reliable. But even then you can miss things.

Randall

[Snarpy]

I am confused. I'm trying to set up a symlink so I don't need to keep two installs of ZenCart, one secure and one unsecure. I changed the name of the un-secure side of my cart so I could pretend it wasn't there while I set up the symlink - the idea being that if it worked, I'd delete it later.

I tried to create a symlink. It appeared to be successful. (on the fifth try)

But when I look at the files in the CNC or through Total Commander, there appears to be a directory with real files with sizes to them where the fake directory (the unsecure side of the cart) is. (Its not the one I had before, because the renamed one is there too.) Are they really there? If so, how is this an advantage? If not, how can you tell the difference between a real directory and a fake one?

Snarpy

[hobbes]

Nor sure I follow your question, but some FTP clients (and possibly FQ's CNC File Manager?), may not tell you when you have a symlink vs. an actual directory. If you log into your account via telnet or ssh, and "ls -l DIR_NAME", it will show you the symlink.

[Snarpy]

but some FTP clients (and possibly FQ's CNC File Manager?), may not tell you when you have a symlink vs. an actual directory. I don't like this. It seems so....untrustworthy. I expect them to tell me THE TRUTH!!!!

Sigh....

Snarpy

[Matt]

This topic has come up a number of times. Getting this right is easiest with Zen Cart, as most of the files are located in a relatively small number of directories. This works very well for FQ, because you just throw all directories in your Secure_Server directory and symlink the ones you need from your www directory. You can also symlink individual files. Using Zen Cart is also a good choice because it's designed for Register_Globals=OFF, which is likely to become a necessity at some point. Save yourself considerable headache and just use Zen Cart.

-Matt

[Snarpy]

I just symlinked the whole cart. The cart is properly configured so it "knows" when to have the lock on (https://) and when not to.

Snarpy