cannot access PAYMENT settings in shopsite setup

[colinlaw]

I'm fairly certain this is a simple fix but I am completely lost as to how. When I select "COMMERCE SETUP" and then the "PAYMENT" button, instead of the expected screen of options I get another Control Panel login which leads to a page of code

Code: Select all

<SCRIPT language="JavaScript">
<!--
window.location="/Core/vsso.cgi?shopsite_auth_tkt=MDNmMGQ2ZWM1NTUwNWQ5YmU2MTg1MjNiZTMwMDk3YTg0ZDI3M2FjZXNwYTExNyE=&url=https://spa117.sslcert19.com/cgi-bin/ss/payconfig.cgi";
//-->
</SCRIPT>
</head></html>

Note that we are using spa117.sslcert19.com which is the shared SSL URL for our ISP instead of having a paid one for our domain spaceupdate.com. I have this shared SSL URL set for all 4 entries in the SSL Security Settings section of "Hosting Service" options.

Anyone have any ideas?

[Jim]

The payment screen will be accessed with the secure url if you have that option checked under Preferences > Hosting services. Since the webserver treats secure and non-secure urls separately you will be prompted to log in to the secure url when you go to a screen that uses the secure url setting. Is that what your are trying to say?
Another screen that goes secure is the Orders screen. Does that one also have the symptom? Once you have logged into the secure url and the non-secure url for the store you won't be prompted to log in again unless you close your browser windows.

[colinlaw]

Yes... in fact the Orders settings does also pull up the Control Panel login and also dumps the same HTML text to the window, so those settings are also unavailable to me.

I've contacted our ISP, Verio (really starting to hate them), and their tech was baffled and had to escalate the issue.

The ShopSite Forums are the only place I've gotten any good tech help with shopsite. There isn't any direct tech support with the company is there?

[colinlaw]

As a test, I changed all the domain entries in "Hosting Service : SSL Security Settings" from the shared SSL URL
spa117.sslcert19.com
back to my regular domain
spaceupdate.com
and now all the ShopSite options including Orders and Payments display for me.

Its my understanding thought that my store cannot function this way, with spaceupdate.com in the SSL Security Settings, because we do not have an SSL certificate for the domain, and all of the payment gateway authentication stuff will fail without a authenticated secure connection.

I was thinking that maybe I could configure ShopSite using my domain name in the security settings and then switch it all to the shared SSL as the final step, but that definitely doesn't seem correct.

There are only 4 places in SSL Security Settings where I had put spa117.sslcert19.com. Some of the themes seem to require it there, but could it be that I don't need it in all 4 slots?

[Jim]

The normal process is that store pages and the initial shopping cart screen are not secure since no payment information is on them. The second shopping cart screen where the shopper enters address and payment information and screens following that will be secure.

The 4 secure urls, under Preferences > Hosting Services, will affect just certain screens in the back office that display username, passwords, credit card data etc and the shopping cart screens where shoppers enter payment information, passwords etc.

I went to your store and added a product to the cart and continued to the billing screen and the url did switch to the secure url https://spa117.sslcert19.com/cgi-bin/sc/billing.cgi So it appears to be working however theme images are not showing up correctly on the secure url. Viewing the source of the page it is looking for images at urls like https://spaceupdate.com/store/shopsite-images/en-US/backgrounds/3col/3col-4-blue.jpg When it should be looking at https://spa117.sslcert19.com/store/shopsite-images/en-US/backgrounds/3col/3col-4-blue.jpg

So what do you have for the ShopSite Images secure URL: on the Preferences > Hosting Services screen? It should probably be https://spa117.sslcert19.com/store/shopsite-images or what ever is in the ShopSite Images URL: with https:// and your domain name changed to spa117.sslcert19.com



As far as support for ShopSite goes, that is generally provided by our partners who resell ShopSite to their hosting clients. If they are unable to resolve an issue they can escalate it to the ShopSite support department.
For merchants who are not with a partner or are with a partner that does not offer support, support is available on a per incident or a yearly basis from our website http://shopsite.com/support_pricing.html

[colinlaw]

Thanks for all your help, Jim. You are definitely seeing what I have, which is the store theme fails if I don't have the My spa117.sslcert19.com set for ShopSite Images. If I change them to all be spa117.sslcert19.com as below, then I cannot access the Store settings.

Use SSL security in Shopping Cart
Shopping Cart secure URL: https://spa117.sslcert19.com/cgi-bin/sc
Secure Store URL: https://spa117.sslcert19.com/store

Use SSL security in ShopSite (Merchant Interface)
ShopSite secure URL: https://spa117.sslcert19.com/cgi-bin/ss
ShopSite Images secure URL: https://spa117.sslcert19.com/store/shopsite-images

My question clearly has become one of do I need that shared SSL URL on all 4 settings for both the theme to work AND for a payment gateway to work? I'm guessing I do not but since I haven't hit on the combination of which can be just spaceupdate.com. I clearly want SSL security enabled for the Shopping Cart, and I clearly have to have SSL security enables for ShopSite (Merchant Interface) so the themes load properly. Maybe if I just change the "ShopSite secure URL" I can also access the Payment and Orders settings. I will try that next.

[Jim]

Yes the secure urls should all be used. If they are not all used then on the secure screens in the shopping cart the shopper will see warnings that some non-secure items on on the page being displayed. This will cause some shoppers to leave the site because they won't want to input payment info on a site that is not secure.

It may be that the secure cert is not installed properly for accessing everthing on your site. You should contact Verio again and if the first person you talk to can't help have them escalate the issue to the next tier of support until they get it resolved. There top tier of support have direct access to ShopSite so they can contact us if they need assistance. Get a support case number and if you can't get it resolved send the case number to me and I'll have our account rep for Verio contact their support manager.

[colinlaw]

I finally got a Verio tech with some good ideas and we trial and error'd until we discovered that the PAYMENT and ORDER options pages for ShopSite load just fine if I login to my Verio Control Panel not with spaceupdate.com/ControlPanel, but instead with spa117.sslcert19.com/ControlPanel. Something about the confusion of domains and security clearances when first accessing ShopSite by logging in to my Verio account as spaceupdate.com that has no certificate itself.

So I have found how I can access all the ShopSite features by changing how I first login to manage my site.

I wanted to share this in case it was helpful to others down the line. Our plan is to purchase our own SSL certificate now so that spaceupdate.com will be the sole domain used in all the steps of our website and ShopSite store management.