Switch whole site to SSL - any changes needed in PayPal account

Hi.

I am moving hosts and on the new hosts I am going to make the whole site SSL. I have installed the SSL certificate on the new site already but before I make the switch, is there anything else I have to do, like...

1. Change any details on the PayPal account making the urls https:// instead of http:// or are no changes necessary?

2. My client has another company manage the DNS details, emails etc. All I will be asking them to do is change the ipaddress to point to the new site at the new hosts. Do they need to update any of the DNS details now I have moved to SSL, again like https://?

Is there anything else I need to consider?

Thanks for your time with this.

It depends....

If in your paypal account settings you have defined an IPN Handler URL, then yes..make sure it has the httpS:

If you defined the IPN Handler URL in your paypal plugin settings in nopC, then no worries, as your site will ensure that paypal is sent to the correct secure URL.

Thanks for your reply.

So, I just need to change the setting in the nopcommerce PayPal plugin to be https? Or I actually don't have to do anything because nopcommerce knows to do everything under https?

We are also planning to move from http to https but my question is what about the seo? Do we have to do a redirect 301 or google will see the "new" pages straight away?

This is quite a new goal for our team so we haven't read the google guide yet but if someone that is using nopcommerce have already done this step it'd be helpfull also for us

Thank you
Lorenzo HobbyStore team

Yes, google will see the change straiight away (it is very common and handled great from G algorithm).
You are not creating new pages or moving the website so that's perfectly transparent.
As for SEO it will also give you extra benefits http://searchengineland.com/google-starts-giving-ranking-boost-secure-httpsssl-sites-199446

Anyone knows a good ssl certificate not very expensive for nopcomerce?

Lorenzo

Thank you opso, but as I read on internet we should write a redirect 301 of the whole site in the IIS rewrite module:

<rule name="HTTP to HTTPS redirect" stopProcessing="true">
  <match url="(.*)" />
    <conditions>
      <add input="{HTTPS}" pattern="off" ignoreCase="true" />
    </conditions>
   <action type="Redirect" redirectType="Found" url="https://{HTTP_HOST}/{R:1}" />
</rule>

or via global.asax file:

protected void Application_BeginRequest(Object sender, EventArgs e)
{
    if ( !Request.IsSecureConnection)
    {
            string path = string.Format("https{0}", Request.Url.AbsoluteUri.Substring(4));

            Response.Redirect(path);
    }
}

Is it correct or nopcommerce do this step automatically when we switch from http to https in the admin section?

Thank you for your help
Lorenzo

uciocan wrote:

I see you asked it more than a year ago, but in case you're still interested:

https://letsencrypt.org/

Not just cheap, but these are completely free SSL certificates.   No drawbacks, no hidden costs, no ads. I am using them even for low budget test sites. These are valid for 90 days, but they renew automatically with the correct setup.

The open source windows utility LetsEncrypt-Win-Simple is explained here:  https://weblog.west-wind.com/posts/2016/Feb/22/Using-Lets-Encrypt-with-IIS-on-Windows

There are lots of tools in the web using this free certification service, if you prefer a graphic UI, look at this for example here:
https://certifytheweb.com/