SSL Patch for AbleCommerce Gold R11

Applies to: AbleCommerce Gold R11 only

Release Date:  12/18/2015

Summary:  This patch will fix 4 specific issues when the new Secure All Pages feature is being used.  To see if this feature is active, visit the Configure > Security > System Settings page within your Merchant Menu.

INFORMATION

This patch only applies to AbleCommerce Gold R11 (build 8643) stores that are using the new Secure All Pages feature implemented in this version.  If you are not using this feature, then it is not necessary to apply the patch, but if you are using AbleCommerce Gold R11, you may want to apply the patch in case you decide to use the feature at a later time.

ISSUES FIXED

• [AC8-3007]  Lost Password email template is missing a fully qualified store URL to reset password

• [AC8-2990]  Sitemap should generate HTTPS based URLs for secure pages.

• [AC8-2989]  SSL module should use permanent redirects for secure/nonsecure pages

• [AC8-2963]  SSL over entire site is not working when using extension less or custom URLs

PATCH INSTRUCTIONS:

There will be two steps required to complete the installation this patch.  The applicable downloads are available in the next section.  Read all instructions below before continuing.

PART ONE:

1. Download the applicable Gold Patch below for the version you are using.

2. Apply the 4 updated files.  This includes the following:

{website}\Bin\CommerceBuilder.dll

{website}\Bin\CommerceBuilder.Licensing.dll

{website}\App_Code\CommonSiteMapProvider.cs

{website}\Admin\Store\Security\Default.aspx

1. Stop the website using IIS application server.

2. Copy the 2 new DLL files to the {website}\BIN\ folder, replacing the existing ones.

3. Copy the remaining files to their respective locations.

4. Restart the website.

PART TWO:

Modify the default Store URL if you are using the new Secure All Pages feature.

1. Login to the AbleCommerce Merchant Administration.

2. From the main menu, go to the Configure > Security > System settings page.

3. Check to see if the Secure All Pages option is checked.  If it is, then change the value in the Store URL field so it is https instead of http.  If it is not checked, then no change is needed.
   
   e.g. change FROM http://my_store_domain.com/ TO https://my_store_domain.com/

4. Click the SAVE SETTINGS button.
   
   Note:  A new Javascript function has been added to this page so any change to activate/deactivate the Secure All Pages feature will automatically adjust the Store URL as needed.