Adding SSL-support to Magento

Adding SSL-support to Magento

We have got many requests lately about how to add SSL (https)-support in Magento. Here is instructions on how to add SSL-support to a Magento-installation.

Who needs SSL?
SSL is important for stores who want their customers to be sure everything they enter in the Account-area and Checkout-area is encrypted along the way from their browser to your server. Stores with payment-gateways where the customer type in their creditcard-information directly in Magento and is not transferred to a secure page at the creditcard-providers servers will also need SSL.

So what do I need to get started?
First of all, setting up an SSL-certificate can be complicated depending on your hosting-company’s facilities and it can also mess up the Magento-store - so make sure you know what you are doing at any time. We do NOT take any responsibility for the setup, blabla. You know the deal.

So, back to what you need. First of all you of course need a valid SSL-certificate . You also need a dedicated  IP-address on the server you’re running Magento on. And last, you need proper access to the Magento-server (SSH-access).

Step 1: Get the SSL-certificate and install it
There are many companies offering SSL-certificated. Some cost a lot of money (those displaying your company’s name in green text in the left side of the URL in the browser - which most Online banks use. The cheaper ones, which are just fine for your needs offer a plain, secure certificated. RapidSSL is a company who sell the cheap ones, which works perfectly well.

Installing the certificate is different on most hosting-systems so this you’d need to check with your hosting-provider or give Google a  try .

Step 2: Get your own IP-address
If you’re not very much into servers, Apache and hosting in general I’d recommend you just asked your hosting-provider to give you a dedicated IP address for your particular site. Tell you are going to use SSL and they should know what you’re talking about. Most hosting-providers charge a few extra bucks per month for a dedicated IP address and as long as they’re not talking about tens of dollars every month it should be fine.

One important thing with the dedicated IP address is that it makes thing much easier if you get the IP set up on your domain before  you install Magento, as you’d most likely need to move Magento to a new location on the server if you decide to add SSL at a later time.

Step 3: Adding SSL-support in Magento
Ok, this is maybe the easiest part. First you should, depending on your server-setup, symlink your “secure” directory to your “public” directory. SSH into your server and - if you are using DirectAdmin - go to the following folder:
./domains/yourdomain.com/

Now type “ls -l” and you should see a list of the folders. Now type the following command:
“ln -s private_html public_html”

This command might need be run as ‘root’ so make sure you have proper access to your box.

Alternative in DirectAdmin:
If you have the proper permissions in DirectAdmin you can go to Domain Setup -> Click your domain, and then enable “Make private_html symbolic link to public_html”. Click on Save and it should be symlinked automatically.

Now you must log into Magento Admin -> System -> Settings -> Web and make sure the Secure Base URL is set to https ://www.yourstore.com (the Unsecure URL must not be changed to https).

Congratulations! If you’ve done everything correct you should now see that you automatically get https in the address-bar on both the Account-pages and Checkout-pages.

To see a working site with this functionality, add some Magento-goodies from our site in the cart and proceed to checkout, and buy it