on the cart page, update the eCart Checkout server behavior to point to checkout.php instead of just checkout.php.
if you are using paypal express checkout, you will also need to edit the return and failure urls on the checkout.php page to use the secure https address.