mod_rewrite / SSL / oscommerce /subdomains

[oldworldcharms]

I have a multi-shop oscommerce site. CollectingPlus
I currently have a 2 subdomain with another domain pointed to it. Antiques & Old World Charms
and my test site. test site

On the test site I was able to get the Yasu mod_rewrite working but when logging in to purchase the test site is redirected to the collectingplus SSL site. What I want is to stay on the test site. (or when I figure this out on the shop (subdomain site)

Would each shop need its own SSL?

If I do a mod_rewrite on Antiques & Old World Charms

How would I modify this mod_rewrite to use that cert?

# $Id: .htaccess,v 1.3 2003/06/12 10:53:20 hpdl Exp $
#
# This is used with Apache WebServers
#
# For this to work, you must include the parameter 'Options' to
# the AllowOverride configuration
#
# Example:
#
# <Directory "/usr/local/apache/htdocs">
# AllowOverride Options
# </Directory>
#
# 'All' with also work. (This configuration is in the
# apache/conf/httpd.conf file)

# The following makes adjustments to the SSL protocol for Internet
# Explorer browsers

<IfModule mod_setenvif.c>
<IfDefine SSL>
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
</IfDefine>
</IfModule>

Options +FollowSymLinks
RewriteEngine on
RewriteBase /catalog
RewriteRule admin - [L]
RewriteRule catalog$ /catalog/index.php [R,L]
RewriteRule catalog/$ /catalog/index.php [R,L]
RewriteCond %{REQUEST_URI} !-d
RewriteCond %{REQUEST_URI} !^/$
RewriteRule !\.(gif|php|css|jpg)$ /catalog/rewrite.php

# Fix certain PHP values
# (commented out by default to prevent errors occuring on certain
# servers)

#<IfModule mod_php4.c>
# php_value session.use_trans_sid 0
# php_value register_globals 1
#</IfModule>


Your help is appreciated
Elizabeth

[jason]

If you try to use https with a domain name that you do not have a certificate explicity issued to then the browser is going to issue a warning (in the form of a big WARNING! dialog box) to your users. This is probably not what you want, and if you don't usse https then your transactions won't be encrypted. So your options are to either use your existing certificate and let the use see the changing domain name or get a new certificate.

Also note that you need a dedicated IP address for each certificate you have, so if you opt for the new certificate option you might have to move your multihosted site to its own account.

--Jason