what can cause SSL Problems?

On Fri, 12 Mar 2004 16:18:37 -0000, "William Tasso"
<SpamBlocked RemoveThis @tbdata.com> wrote:

 >How is the shopping cart managed? client/server?
 >
 >How does the new domain tie in the visitor to an existing visitor on the
 >shopping site?

it is all managed by php session which works fine after I have adjust
all the nitty-gritties with cookie domain settings and ssl settings.

Just seems to cause problems on some customers who seem to loose the
session when changing to the ssl URL.

Marian

--
Internet-Dienstleistungen - von der Webseite bis zum Online-Shop
<a style='text-decoration: underline;' href="http://www.heddesheimer.de" target="_blank">http://www.heddesheimer.de</a> mailto:marian@heddesheimer.de<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: what can cause SSL Problems? 

Marian Heddesheimer wrote:
 > On Fri, 12 Mar 2004 16:18:37 -0000, "William Tasso"
 > <SpamBlocked DeleteThis @tbdata.com> wrote:
 >
  >> How is the shopping cart managed? client/server?
  >>
  >> How does the new domain tie in the visitor to an existing visitor on
  >> the shopping site?
 >
 > it is all managed by php session which works fine after I have adjust
 > all the nitty-gritties with cookie domain settings and ssl settings.
 >
 > Just seems to cause problems on some customers who seem to loose the
 > session when changing to the ssl URL.
 >

Could third-party cookies be the problem here?

--
William Tasso<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: what can cause SSL Problems? 

"Marian Heddesheimer" <120304.20.nolink.DeleteThis@spamgourmet.com> wrote in message
news:o5r3505uvmnk3anr7s0deiev1i3s571een@4ax.com...

 > it is all managed by php session which works fine after I have adjust
 > all the nitty-gritties with cookie domain settings and ssl settings.
 >
 > Just seems to cause problems on some customers who seem to loose the
 > session when changing to the ssl URL.

Are you sure they are losing it when they connect to the third party, not
losing it when they return from the third-party?

It reminded me of a similar problem I had when returning a user from a
third-party card processor, back to the script, no session variables!

In my case it didn't work at all, you say it works on some machines, so it
may not be the solution. I'll tell you what it was anyway. Took a bit of
figuring out, and much head scratching!

Basically, the page that set the session variables was at my domain
<a style='text-decoration: underline;' href="http://www.mydomain.com" target="_blank">http://www.mydomain.com</a>

The return URL I had entered on the card processors site was
<a style='text-decoration: underline;' href="http://mydomain.com" target="_blank">http://mydomain.com</a> , note the lack of "www".

Because the variables were set in a subdomain, they wouldn't work one level
up. However, it does work the other way around, i.e if you set them in
mydomain.com they will work in <a style='text-decoration: underline;' href="http://www.mydomain.com" target="_blank">www.mydomain.com</a> , makes sense when you think
about it.

Now I always use the domain without the "www" which are just a superflous
inconvenience. On the form that supplied the values for the variables I
used the absolute address <a style='text-decoration: underline;' href="http://mydomain.com" target="_blank">http://mydomain.com</a> to be sure they were always
set there.
--
Charles Sweeney
<a style='text-decoration: underline;' href="http://www.CharlesSweeney.com" target="_blank">www.CharlesSweeney.com</a><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: what can cause SSL Problems? 

"Marian Heddesheimer" <120304.20.nolink.RemoveThis@spamgourmet.com> wrote in message
news:3qa350d3h5kopqbf3ki85d70mmtgeqf1bg@4ax.com...
 > Hi folks,
 >
 > one of my customerst has problems with an online shop (osCommerce)
 > using a shared cert from their web host. Unfortunately I cannot get
 > the same problem at my site but customers keep complaining about these
 > problems.
 >
 > maybe somebody can give me a hint here how I could reproduce SSL
 > related problems here? I suspect it is the IE 6 bug but even after I
 > have installed the patch 832894 for my IE, I cannot reproduce the
 > problem.
 >
 > I have also heard about problems caused by proxy servers that are used
 > in large companies. They may sometimes cause problems when using SSL
 > pages. But I don't know how I could configure a proxy here, that will
 > provide me with these problems (I have apache running as http proxy
 > but don't get any problems using SSL pages).
 >
 > The symptom is:
 > if the customers clicks from the shopping cart to checkout, the page
 > changes to https: protocol (it's another domain but on the same
 > server) and all items in the cart vanishes. I could not reproduce this

If you are using cookies and sessions and the visitor is going through a
fireway and his security settings too high that might do it.
All browsers compare the domain in the cookie with the domain they are at
and if there is a missmatch they wont accept.


Even without cookies or sessions if the visitor is changing to a https
through a firewall and their security setting (in their browser prefs) is
set too high they may also have a problem.

I had clients who could not get the data from an ensim control panel from
that! They could access from home ok but at work going through a ;standard'
firewall and with high security settings could not access

Might be it ?


--
bildanet
MyLot.net - the home of the $10 reseller programme<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: what can cause SSL Problems? 

On Sat, 13 Mar 2004 07:43:05 +1300, "Bill Logan" <who RemoveThis @what.com> wrote:

 >Even without cookies or sessions if the visitor is changing to a https
 >through a firewall and their security setting (in their browser prefs) is
 >set too high they may also have a problem.

that might be the problem, I think.

Have you any idea how I could simulate such a firewall setting at my
local machine?

Regards

Marian

--
Internet-Dienstleistungen - von der Webseite bis zum Online-Shop
<a style='text-decoration: underline;' href="http://www.heddesheimer.de" target="_blank">http://www.heddesheimer.de</a> mailto:marian@heddesheimer.de<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: what can cause SSL Problems? 

"Marian Heddesheimer" <120304.20.nolink DeleteThis @spamgourmet.com> wrote in message
news:084450trffmfnoc7efosa1hccq3db8fjq8@4ax.com...
 > On Sat, 13 Mar 2004 07:43:05 +1300, "Bill Logan" <who DeleteThis @what.com> wrote:
 >
  > >Even without cookies or sessions if the visitor is changing to a https
  > >through a firewall and their security setting (in their browser prefs) is
  > >set too high they may also have a problem.
 >
 > that might be the problem, I think.
 >
 > Have you any idea how I could simulate such a firewall setting at my
 > local machine?
 >
Get hold of a firewal pachage and install - then set your browser security
as high as it will go!


--
bildanet
MyLot.net - the home of the $10 reseller programme<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: what can cause SSL Problems?