How to enable SSL in OpenCart 2

Set HTTPS rule in the config.php Files

Before you enable the SSL support in your OpenCart 2 admin dashboard you will need to edit the two configuration files of your OpenCart 2. Both files are called config.php and they are located under the root directory of your OpenCart 2 application and under the admin folder:

[opencart-root-folder]/config.php
[opencart-root-folder]/admin/config.php

You can edit your files either via your cPanel File Manager or by downloading them on your local computer via FTP and reupload them after the changes.

Either way, you will need to locate the following section in both of your files:

// HTTPS
define('HTTPS_SERVER', 'http://yourdomain.com/');

Modify the line to include https instead of http:

// HTTPS
define('HTTPS_SERVER', 'https://yourdomain.com/');

When you have the correct https URL set for your OpenCart 2 application, save the files and upload them back to your OpenCart 2 installation if you are performing the changes locally on your computer. Remember to modify both the main config.php file and the admin folder config.php.

Enable SSL via the Admin area

Now you need to activate the SSL support via the OpenCart 2 admin dashboard. You can easily do this by logging in your OpenCart 2 admin panel and refer to the settings menu.

From the store list click on the edit icon next to your store name and proceed to the Server settings tab.

The first settings under the Server tab should be the Use SSL option. Click on the Yes radio button and save your settings via the save icon at the top right corner of your screen.

Now your checkout, registration and other pages on which sensitive information is submitted will be accessible only via HTTPS.

Force HTTPS only for OpenCart 2

If you would like to have your store accessible via HTTPS only, you may return to Step 1 in this tutorial and edit not only the HTTPS URL but the HTTP as well.

To do this, open once again your OpenCart 2 config files and edit the following line:

// HTTP
define('HTTP_SERVER', 'http://yourdomain.com/');

to

// HTTP
define('HTTP_SERVER', 'https://yourdomain.com/');

This way you will force your store to use HTTPS only for all pages and your admin panel.