Hi All,
This one is driving me nuts. There must be someone here smarter than me who has an idea.
I’m working on a site in which a couple form pages are encrypted for cc numbers. I have an SSL cert from digicert.com installed. As far as I can tell, it’s installed OK, but I’m no SSL expert. Most of the site is not HTTPS.
To prepare the SSL pages, they have their own template so that the base href uses the HTTPS url without www, as the cert specifies the domain without "www".
I also saw a setting in the manager for server type, HTTP or HTTPS. I left this HTTP, because it seemed to do nothing, no matter what changes I made. I also did not make the htaccess change, because there was no special URL for secure stuff.
All of this works great in good old IE6. The page encrypts just fine. However, in Firefox, it does work, but you get the SSL warning first,
Website Certified by an Unknown Authority
Unable to verify the identity...
...which scares the nervous client.
What’s really strange is that when I tested all this the other day, all was just perfect! I was thinking that maybe someone made a change to the pages or templates. In trying to fix, I looked for outbound full links, which I understand will cause warnings. I took those out for my test, but that did not remove the warning.
I found the Encryption snippet, and this great post
http://modxcms.com/forums/index.php/topic,24052.msg147997.html#msg147997, which includes a nice snippet by Ganesh called defineBaseHref, and tried all that. I still get the warning in FF.
I made my pages uncached, and kept clearing my browser cache, which probably didn’t help, but I was running out of ideas. I even cleared the MODx cache, which has occasionally caused various problems. What say you, genius folks?
Here’s a URL if you’d like to look (please don’t send anything)
https://guelphbiblecc.com/fcyah-registration.html
Thanks very much, Samba