Secure Server Question

Discussion in 'Payments processing' started by JimmyStephans, Sep 5, 2005.

  1. JimmyStephans

    JimmyStephans aMember Pro Customer

    Joined:
    Mar 24, 2004
    Messages:
    95
    My installation of aMember doesn't trigger the little lock in the corner of browser windows when the customer is transferred to the secure server for payment.

    The URL changes from:

    http://www.mysite.com/

    to

    https://secure.mysite.com/

    But, the lock is not closed as it should be.

    The same site also has a shopping cart feature and when going to payment page for the cart the lock is closed and shows secure.

    Any ideas?

    Jimmy
  2. tomarriola

    tomarriola Member

    Joined:
    Mar 29, 2003
    Messages:
    140
    Amember does not create encyrption for your secure server. You need to setup your secure server by either self-generating encryption keys or using a known company like geotrust at http://www.geotrust.com/. if you are going to collect money from folks its wise to spend approx 50 bucks on a service like geotrust. Otherwise people will get a popup asking if they want to trust your self generated encyrption--which can scare away customers.

    Tom

    PS, if your cart gets the lock icon perhaps it is using a slightly different url. Each url needs its own security encryption key.

    If https://store.domain.com has a security encryption key it does not cover https://www.domain.com.
  3. JimmyStephans

    JimmyStephans aMember Pro Customer

    Joined:
    Mar 24, 2004
    Messages:
    95
    Tom,

    Thanks for the post.

    The issue is that my secure certificate works with my shopping cart and the lock is activated when the payment page for the cart calls https://secure.mysite.com/

    But, the lock is not activated when they are buying subscriptions with aMember and it takes them to https://secure.mysite.com/

    I have secure certificate for the domain. My question is why the lock is not activated by aMember.

    Jimmy
  4. tomarriola

    tomarriola Member

    Joined:
    Mar 29, 2003
    Messages:
    140
    Perhaps the page contains secure and insecure items. Possibly--there are graphics, located nonsecurely at http://www.domain.com but are linked to from your secure page at https://secure.domain.com.

    One way to check is to load the page that should have the secure padlock icon and then (in Firefox) go to your browsers tools menu and select page info. It will list all the full urls in use. You'll probably see some that aren't on your secure server.
    Tom
  5. JimmyStephans

    JimmyStephans aMember Pro Customer

    Joined:
    Mar 24, 2004
    Messages:
    95
    Tom,

    That was it.

    Site redesign recently and the new header page didn't pull the graphics from the secure URL.

    Thanks!

    Jimmy

Share This Page