Hi,

> need a virtual host for each https

I think this is the right solution – the details below aren’t tested – but I hope are enough to get you started to a fix!

 

The content in each ~/cfg/apache_ssl/ARCHIVEID.conf:

#####################

  <Location "">

    PerlSetVar EPrints_ArchiveID ARCHIVEID

    PerlSetVar EPrints_Secure yes

 

    Options +ExecCGI

    Order allow,deny

    Allow from all

  </Location>

#####################

 

needs to go into a seperate vhost block with the appropriate ServerName (and with all the necessary SSL bits completed too - … below):

#####################

<VirtualHost *:443>

ServerName …

ServerAdmin …

SSLEngine on

SSLCertificateFile …

SSLCertificateKeyFile …

SSLCertificateChainFile …

SSLProtocol …

 

#may be in /opt/eprints instead?

Include /usr/share/eprints/cfg/apache_ssl/ARCHIVEID.conf

 

PerlTransHandler +EPrints::Apache::Rewrite

</VirtualHost>

#####################

 

 

Cheers,

John

 

From: eprints-tech-bounces@ecs.soton.ac.uk [mailto:eprints-tech-bounces@ecs.soton.ac.uk] On Behalf Of Sebastian Schick
Sent: 10 December 2015 14:10
To: eprints-tech@ecs.soton.ac.uk
Subject: [EP-tech] Re: problem with multiple archives from

 

Hi,

 

we still have problems running our archives with https.

Maybe we now have a more detailed understanding of the problem. I will try to describe the situation below.

 

As long as no user is logged in at a https enabled archive, everything is ok.

It is only possible to log on  to the first https archive ({host} = 'eprints.localhost';) but not to the second https archive ({host} = 'eprints.dbis.localhost'; ).

In the latter case we get an authentication error (user not known).

If someone is logged onto the first https archive, for all other archives the links become wrong.

In this case the links will be set to the host of the first https archive, with the exception of the “create account” button.

If the user is logged out, links are generated correctly.

 

We assume that this is a problem with the virtual host configuration of the apache.

Maybe we also need a virtual host for each https enabled archive instead of a general virtual host definition with locations?

 

 

Do you have any other hints?

 

Sebastian

 

 

Von: eprints-tech-bounces@ecs.soton.ac.uk [mailto:eprints-tech-bounces@ecs.soton.ac.uk] Im Auftrag von Sebastian Schick
Gesendet: Dienstag, 24. November 2015 21:07
An: eprints-tech@ecs.soton.ac.uk
Betreff: [EP-tech] Re: problem with multiple archives from

 

Hi,

 

we were able to run one archive with https and two other archives with http!

If we try to run three archives with https we run into the same problems as described before.

We also tried to run two archives with https and the third with http. In this case only the links for the second archive with https are generated wrong.

 

Does anyone have a running configuration for more than 2 archive using https?

 

 

Here is our configuration for two archives.

First archive:

 

# This file was created by bin/epadmin

# You can regenerate this file by doing ./bin/epadmin config_core ifi

$c->{host} = 'eprints.localhost';

$c->{port} = 80;

$c->{aliases} = [];

$c->{securehost} = 'eprints.localhost';

$c->{secureport} = 443;

$c->{http_root} = undef;

 

Second archive:

 

# This file was created by bin/epadmin

# You can regenerate this file by doing ./bin/epadmin config_core dbis

$c->{host} = 'eprints.dbis.localhost';

$c->{port} = 80;

$c->{aliases} = [];

$c->{securehost} = 'eprints.dbis.localhost';

$c->{secureport} = 443;

$c->{http_root} = undef;

 

Do you have any other hints?

 

Sebastian

Von: eprints-tech-bounces@ecs.soton.ac.uk [mailto:eprints-tech-bounces@ecs.soton.ac.uk] Im Auftrag von Adam Field
Gesendet: Montag, 2. November 2015 16:41
An: eprints-tech@ecs.soton.ac.uk
Betreff: [EP-tech] Re: problem with multiple archives from

 

Is there a pattern in which links go to the wrong site (e.g. https ones don't work?).

 

--
Adam Field
Business Relationship Manager and Community Lead
EPrints Services

 

 

 

On 2 Nov 2015, at 15:32, Sebastian Schick <sebastian.schick@uni-rostock.de> wrote:

 

Yes, the first archive is running https. The second not yet.

Sebastian

 

Von: eprints-tech-bounces@ecs.soton.ac.uk [mailto:eprints-tech-bounces@ecs.soton.ac.uk] Im Auftrag von Adam Field
Gesendet: Montag, 2. November 2015 15:53
An: eprints-tech@ecs.soton.ac.uk
Betreff: [EP-tech] Re: problem with multiple archives from

 

Are you running https?

 

 

--
Adam Field
Business Relationship Manager and Community Lead
EPrints Services

 

 

 

On 30 Oct 2015, at 15:15, John Salter <J.Salter@leeds.ac.uk> wrote:

 

That all looks OK (I'm guessing 'loclhost' in the second one is a typo?)

Have you got any other config files that define 'base_url' or similar in:
~/archives/<dbis>/cfg/cfg.d/
~/archives/ <inf>/cfg/cfg.d/
~/lib/cfg.d/
~/lib/syscfg.d/
~/cfg/cfg.d/

The http paths configured in here:
https://github.com/eprints/eprints/blob/3.3/perl_lib/EPrints/Repository.pm#L504
Which in turn calls _add_http_paths:
https://github.com/eprints/eprints/blob/3.3/perl_lib/EPrints/Repository.pm#L715-L774
and _add_live_http_paths:
https://github.com/eprints/eprints/blob/3.3/perl_lib/EPrints/Repository.pm#L288-L300

- but these can be overridden in config files.

If none of that helps, if you look at the source-code for a page, are the links relative, or absolute?
Do you have a <base...> element in your template?

Cheers,
John



-----Original Message-----
From: eprints-tech-bounces@ecs.soton.ac.uk [mailto:eprints-tech-bounces@ecs.soton.ac.uk] On Behalf Of Sebastian Schick
Sent: 30 October 2015 14:41
To: eprints-tech@ecs.soton.ac.uk
Subject: [EP-tech] Re: problem with multiple archives from

Hi Thomas,

the content of <EprintsPath>/archives/<dbis>/cfg/cfg.d/10_core.pl is
$c->{host} = 'dbis.localhost';
$c->{port} = 80;
$c->{aliases} = [];
$c->{securehost} = '';
$c->{secureport} = 443;
$c->{http_root} = undef;

the content of <EprintsPath>/archives/<inf>/cfg/cfg.d/10_core.pl is

$c->{host} = 'inf.loclhost';
$c->{port} = 80;
$c->{aliases} = [];
$c->{securehost} = '';
$c->{secureport} = 443;
$c->{http_root} = undef;



Is there something missing in the second conf file?

Sebastian


On 30.10.2015 14:52, Thomas Lauke wrote:

Hi Sebastian,

Why does eprints generate wrong links on the web pages?

imho the definition in <EprintsPath>/archives/<repoID>/cfg/cfg.d/10_core.pl is relevant during bin/generate_static ...

Hth
Thomas

*** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
*** Archive: http://www.eprints.org/tech.php/
*** EPrints community wiki: http://wiki.eprints.org/
*** EPrints developers Forum: http://forum.eprints.org/

 

*** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
*** Archive: http://www.eprints.org/tech.php/
*** EPrints community wiki: http://wiki.eprints.org/
*** EPrints developers Forum: http://forum.eprints.org/

 

*** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
*** Archive: http://www.eprints.org/tech.php/
*** EPrints community wiki: http://wiki.eprints.org/
*** EPrints developers Forum: http://forum.eprints.org/