No SSL padlock on site.

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed.
3 years ago
The hosting company advised me it must be forced by nop.
A 7 year old post by Andrei 'Just set "SecuritySettings.ForceSslForAllPages" setting to "true"' at https://www.nopcommerce.com/en/boards/topic/21409/how-can-i-enable-ssl-for-the-entire-nopcommerce-site seem to be out dated

seems to be outdated.

In the admin site settings a search for 'SSL', 'SecuritySettings.ForceSslForAllPages' and 'ForceSslForAllPages' all return not found.

How can the new nop be set to force SSL
3 years ago
Those settings no longer exist in v4.3
I assume it just uses the setting in Stores and now automatically forces all pages to use SSL ?
Check your store settings https://yourstore.com/Admin/Store/Edit
Click on the browser site info link and see if it says Certificate in Valid
Check the status of your ssl using a site like https://www.ssllabs.com/
3 years ago
Hi Yidna

Almost there the site still does not have a padlock

Summary of actions
An 'A" rating for the site was received from  https://www.ssllabs.com/

I found the enable SSL option in nop as you outlined.
The Check box 'SSL enabled' was enabled (checked) by default.
Below the check box the following warning is included 'WARNING: Do not enable it until you have SSL certificate installed on the server.
There is no indication to rectify enabling an SSL prior to installing the SSL or if it's necessary should this condition occur

Recycling the site did not help.
3 years ago
Regards the SSL checkbox - you definitely dont want to un-Check it if you dont have SSL Installed
The browser itself deturmines if a site is SSL Secured and displays the Padlock
Clear the cache on the browser you are using - Try other browser to see what it says
What is your site addresss ?
3 years ago
I have an SSL and received an 'A' rating from https://www.ssllabs.com/
The same issue in firefox
The site is [url]tradermedical.com[/url]
3 years ago
The site now has the lockpad. I guess there is a delay

Thanks for your help
3 years ago
Definitely https://tradermedical.com is SSL locked
But http://tradermedical.com/ is not
Given that other sites are working on 4.3 (including mine) one can only assume its something outside of the website that forces the the http to https ?
And the interesting thing is once you have viewed https:// the browser wont let you enter http://
3 years ago
That is interesting. The redirect to https is not being done by the hosting company therefore it must be done in nop. Though I'm not sure how it was working before I installed the SSL

thanks again
This topic was automatically closed 365 days after the last reply. New replies are no longer allowed.