Shopify now has SSL!

Shopify Staff (Retired)
Shopify Staff (Retired)
290 0 160

Hey everyone!

As of February 1st, Shopify is adding the option to encrypt your custom domains with SSL, right from the very first page. We wrote a blog about it!

We’ve always had SSL in the checkout but more recently there has been a demand to switch over to entirely encrypted sites, not just for customer peace-of-mind, but also to keep up with changes being made by search engines to put HTTP certified sites first.

You can now easily encrypt your online store by clicking “Activate SSL certificates” in your Shopify account. Once activated, all your traffic will be redirected from HTTP to encrypted HTTPS.

SSL certificates are activated by default in Shopify for your store's checkout, and for any content that's hosted on your .myshopify.com domain.

If you’re interested in learning about how to check on your certificates and get them setup, click here to check out our documentation!

As always, if you have any questions, post here or reach out to our support at 1-888-746-7439 or support@shopify.com.

- Alex

1 Like
Shopify Staff (Retired)
Shopify Staff (Retired)
290 0 160

Here’s how to overcome the 2 most common errors: Mixed Content and Loss of Facebook Likes.  

The first step you should take with mixed content errors is to go to Settings > Domain > then click ‘X Unencrypted URLs’ to see a list of the .liquid files you’ll need to go into.

If you see 1 single link popping up on multiple pages (blog.liquid, product.liquid, collection.liquid) then it’s most likely your Mail Chimp Form Action URL (https://docs.shopify.com/manual/configuration/store-customization/communicating-with-customers/accou...). You can change this in Settings > Online Store > Themes - it won’t be in your individual liquid files.

You can go into each .liquid file and if there are any mixed content errors, you’ll see this banner appear:

Replace the http with https on each of the URLs and you’re all set! Don’t forget to check the rest of the .liquid files that were listed in the step above. More information can be found here https://docs.shopify.com/manual/settings/domains/ssl.

Lastly, you can lose your Facebook likes as Facebook considers http and https to be 2 different URLs. Luckily, there’s a way to fix this!

You simply need to replace the og:url with

`<meta property="og:url" content="http://example.com/" />`

where example.com is your primary URL. This will allow Facebook to continue attributing links to your old URL! More information can be found here: https://developers.facebook.com/docs/plugins/faqs#moving-urls.

0 Likes
Highlighted
Tourist
13 0 3

Thank you alex

So to fix the facebook issue are you saying i should replace the og:url in my theme.liquad from this:

<meta property="og:url" content="{{ canonical_url }}" />

To This:

<meta property="og:url" content="http://example.com/" />

Please let me know

 

Thanks

 

 

 

 

0 Likes
New Member
1 0 0

Urgent Issue:

We lost API connection as of 12 PM yesterday 

We are no longer able to connect via API - due to receiving an SSL certificate error  

"no check certificate - unable to establish SSL connection"

We have spoken with general shopify support -- they indicated theyare unable to assist.

We believe this is due to the recent SSL udpate =--- 

how can we resolve this issue - so that our API connection will connect ?

 

 

 

 

0 Likes
Shopify Expert
9764 86 1511

Hey Shadi,

Since Facebook currently needs you to keep the same url (including the protocol) you could look at changing this line:

<meta property="og:url" content="{{ canonical_url }}" />

into this:

{% comment %}
  Remove the https protocol from the canonical url, and replace it with http. 
  Useful for keeping existing likes with Facebook.
{% endcomment %}
<meta property="og:url" content="{{ canonical_url | replace:'https:','http:' }}" />

You don't want to do this (being to literally type in the store url)...

<meta property="og:url" content="http://example.com/" />

... as this will make every page on your site have the same Open Graph url. 

 

Important: Now for any new stores that have started with SSL, don't go and make the change above. This is really only relevant for someone that might have built up a large like list on the older non-secure http urls, and want to keep them.

 

★ Winning Partner of the Build a Business competition. ★ http://freakdesign.com.au
0 Likes
Tourist
13 0 3

Jason thank you so much. I m trying your way now.

0 Likes
Tourist
13 0 4

Thank you, Shopify! That's great to hear.

Now if you guys would just let us edit our own robots.txt and sitemap.xml files. :(

TshirtBonus.com: Funny, cool, offensive T-shirts. High-quality silk screen prints, low prices, and fast shipping. Men's and women's shirts. Sizes up to 5XL.
1 Like
Shopify Partner
136 1 8

Hello Alex,

we have seen that the SSL certificate status section gives false positives for all protocol-relative URLs https://en.wikipedia.org/wiki/Uniform_Resource_Locator#prurl which are perfectly secured URLs when the page is accessed using https.

Consequently, it makes impossible to activate SSL certificates there.

Are there any plans to fix that issue? What could we do?

Kind regards,
  Mike
  Code Black Belt

 

0 Likes
Excursionist
48 0 8

Instead of editing your sitemap, a workaround is to create your own sitemap and upload it somewhere, and then make a URL redirect, like Redirect https://myshopifysite.net/sitemap to https://fakefilehoster.net/mystore-sitemap, and submit the redirect URL (https://myshopifysite.net/sitemap) to search engines.

You can upload your sitemap to your store (https://shopify.com/admin/settings/files), and redirect to the shopify CDN URL (https://cdn.shopify.com/s/files/1/0871/2118/files/sitemap.xml?7374208768399418613).

1 Like
Shopify Partner
136 1 8

Hello Advaith ,

thanks for your response but I don't see how a sitemap can be related to the Shopify SSL activation checker.

Does the SSL checker use the sitemap in any way?

Kind regards,
  Mike

 

0 Likes