Using HTTPS / SSL in checkout?

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed.
10 years ago
Same issue.  I enabled securitysettings.forcesslforallpages (nop 3.0) but my checkout pages are not redirected to https.  What am I missing?
8 years ago
copied from

https://www.nopcommerce.com/boards/t/28612/ssl-problem.aspx

You do not know to change anything in web.config so keep, requireSSL="false" as it is,
configuration-> General And Miscellaneous Settings-> Force SSL for all site pages: checked
configuration-> Stores -> SSL enabled:checked
configuration-> Stores -> Secure URL : https://www.yourstore.com

The above solved my issues where users that asked for www.store.com (and not https://www.store.com) were sent to a http page and allowed to login but after logging in were not behaving as if logged in.

Can someone comment on what the purpose of requireSSL setting is in the web.config file given the settings above?
7 years ago
This solved my issue too. Although the entire site now is running in SSL, I guess that is better than writing a redirect for only a couple pages.

configuration-> General And Miscellaneous Settings-> Force SSL for all site pages: checked
configuration-> Stores -> SSL enabled:checked
configuration-> Stores -> Secure URL : https://www.yourstore.com
7 years ago
Hi All,

We are using Nop 3.1. We have SSL installed and working. We have recently tick the box which says "Force SSL for all site pages" which works fine but one downside.

With this setting enabled a request to http://www.yoursite.com returns only a 302 redirect to https://www.yoursite.com which works but this is not ideal for SEO purpose.

Is there a way of using "Force SSL for all site pages" to use 301 (permeant) instead of 302 redirect. Can this be done using the source code or the web.config file?

Thank you in advance.
7 years ago
a.m. wrote:
1. Install SSL certificate
2. Open web.config file
3. Find "UseSSL" setting and set it "true"


In Nop 3.8, this looks to be called requireSSL (?)
<authentication mode="Forms">
      <forms name="NOPCOMMERCE.AUTH" loginUrl="~/login" protection="All" timeout="15" path="/" requireSSL="false" slidingExpiration="true" />
    </authentication>
This topic was automatically closed 365 days after the last reply. New replies are no longer allowed.