AbanteCart Community

Shopping Cart Operations => Support => Topic started by: snitched on September 23, 2015, 07:01:14 PM

Title: SSL and embedding
Post by: snitched on September 23, 2015, 07:01:14 PM
I am trying to embed a shop into an existing site,
I set up SSL for the shop itself, but there is no SSL on the existing site, when I go to checkout using the embedded shop, it does not appear to be using SSL (or recognizing it?) as for example, Chrome autofill settings for creditcard information do not work, and give a warning saying this form is not using a secure connection imgur com hZoSPua

If I go to the actual abantecart store webpage, and do the same steps I do not get that warning and the autofill and SSL works fine in that example

What is the proper way to proceed to not have that issue on my main site? Do I have to get a separate SSL certificate for my main site or is there a better way to do it?
Title: Re: SSL and embedding
Post by: eCommerce Core on September 24, 2015, 07:30:12 AM
Openning embed modal should have SSL in it, if your embed code has SSL.

Can you please share URL to site with embedded code?

Title: Re: SSL and embedding
Post by: snitched on September 24, 2015, 11:40:29 AM
Thats what I thought should happen, and all of the links are shown up as https for the embedded stuff, and I'm just wondering if its just an issue with the google autofill not recognizing it being SSL or it not actually being SSL, granted I want to resolve it if it's only a google autofill issue also

The link is elangranolatestsite . com/store
Title: Re: SSL and embedding
Post by: eCommerce Core on September 24, 2015, 08:28:15 PM
Thats what I thought should happen, and all of the links are shown up as https for the embedded stuff, and I'm just wondering if its just an issue with the google autofill not recognizing it being SSL or it not actually being SSL, granted I want to resolve it if it's only a google autofill issue also

The link is elangranolatestsite . com/store
Thank you.

Your site looks really nice.

I checked your embed and it works as it should.
Let me explain.
All product pages (by default) are not loaded with HTTPS. These are non-secure pages. Once you go to login, checkout or any other account related section, your site switches to HTTPS.
This is correct behavior.
If you want to have HTTPS all the time, you can set main URL in settings starting with HTTPS.

Possibly, we needed additional setting for embed HTTP mode.

Hope this helps.


Title: Re: SSL and embedding
Post by: snitched on September 25, 2015, 01:11:27 PM
So is there no way to get rid of that warning with embedding at the moment?

I tried putting the default shop with https, I tried embedding that same iframe with https into another website that also has SSL in it and I still get that warning.

I believe that it's using SSL properly, however my issue is for the end user it can appear that there is no secure connection which is worrisome to me in this scenario

It's just confusing to me why this is happening, if it's an issue with embedding or if its some special case with google chrome thats causing it (if this is the case I'd still want to figure out how to fix it)

Edit:
Apparently embedding on a site with SSL working properly actually fixes the issue, I just had incorrect SSL on my main site (it was broken because favicon wasn't there and fetched some unknown icon from a non https location). After fixing that the embedded cart works fine and does not show the above issue
Title: Re: SSL and embedding
Post by: eCommerce Core on September 25, 2015, 10:06:32 PM
In order to get rid of the waring, all included items on your page need to be included with SSL based URL.

Keep HTTPS enabled for main abantecart configuration and embed should work fine with no warning on non-secure item caused by embed.