Hi,

> need a virtual host for each https

I think this is the right solution – the details below aren’t tested – but I hope are enough to get you started to a fix!

 

The content in each ~/cfg/apache_ssl/ARCHIVEID.conf:

#####################

  <Location "">

    PerlSetVar EPrints_ArchiveID ARCHIVEID

    PerlSetVar EPrints_Secure yes

 

    Options +ExecCGI

    Order allow,deny

    Allow from all

  </Location>

#####################

 

needs to go into a seperate vhost block with the appropriate ServerName (and with all the necessary SSL bits completed too - … below):

#####################

<VirtualHost *:443>

ServerName …

ServerAdmin …

SSLEngine on

SSLCertificateFile …

SSLCertificateKeyFile …

SSLCertificateChainFile …

SSLProtocol …

 

#may be in /opt/eprints instead?

Include /usr/share/eprints/cfg/apache_ssl/ARCHIVEID.conf

 

PerlTransHandler +EPrints::Apache::Rewrite

</VirtualHost>

#####################

 

 

Cheers,

John

 

 

Hi,

 

we still have problems running our archives with https.

Maybe we now have a more detailed understanding of the problem. I will try to describe the situation below.

 

As long as no user is logged in at a https enabled archive, everything is ok.

It is only possible to log on  to the first https archive ({host} = 'eprints.localhost';) but not to the second https archive ({host} = 'eprints.dbis.localhost'; ).

In the latter case we get an authentication error (user not known).

If someone is logged onto the first https archive, for all other archives the links become wrong.

In this case the links will be set to the host of the first https archive, with the exception of the “create account” button.

If the user is logged out, links are generated correctly.

 

We assume that this is a problem with the virtual host configuration of the apache.

Maybe we also need a virtual host for each https enabled archive instead of a general virtual host definition with locations?

 

 

Do you have any other hints?

 

Sebastian

 

 

 

Hi,

 

we were able to run one archive with https and two other archives with http!

If we try to run three archives with https we run into the same problems as described before.

We also tried to run two archives with https and the third with http. In this case only the links for the second archive with https are generated wrong.

 

Does anyone have a running configuration for more than 2 archive using https?

 

 

Here is our configuration for two archives.

First archive:

 

# This file was created by bin/epadmin

# You can regenerate this file by doing ./bin/epadmin config_core ifi

$c->{host} = 'eprints.localhost';

$c->{port} = 80;

$c->{aliases} = [];

$c->{securehost} = 'eprints.localhost';

$c->{secureport} = 443;

$c->{http_root} = undef;

 

Second archive:

 

# This file was created by bin/epadmin

# You can regenerate this file by doing ./bin/epadmin config_core dbis

$c->{host} = 'eprints.dbis.localhost';

$c->{port} = 80;

$c->{aliases} = [];

$c->{securehost} = 'eprints.dbis.localhost';

$c->{secureport} = 443;

$c->{http_root} = undef;

 

Do you have any other hints?

 

Sebastian