HTTPS [Sana 8.3 SP1]

Full HTTPS

If you configure full HTTPS and the Sana Commerce backoffice runs as a virtual directory on the frontend domain, then the backoffice will also run via HTTPS. In this case no additional SSL certificate is needed for the Sana Commerce backoffice.

Step 1: Open the 'web.config' file of the Sana Commerce frontend.

Step 2: Locate the following line:

<ssl mode="Off" partialConfigPath="partial-ssl.config" bypassWarning="true" />

Step 3: Change SSL mode to 'Full'.

With a 'Full' SSL mode the webshop completely runs via HTTPS and all requests to HTTP will be automatically redirected to HTTPS.

Step 4: Open the 'web.config' file of the Sana Commerce backoffice and locate the following line in the 'system.serviceModel/client' configuration section:

<endpoint address="http://domainname/Management/PublishWebService.asmx" binding="basicHttpBinding" bindingConfiguration="PublishWebServiceSoap" contract="PublishService.PublishWebServiceSoap" name="PublishWebServiceSoap"/>

Step 5: Change 'http' to 'https' in the URL.

Step 6: To make the refresh site cache functionality also working under HTTPS you should accomplish the steps from the chapter 'Configure Publish Web Service for HTTPS'.