EPrints Technical Mailing List Archive

Message: #00827

< Previous (by date) | Next (by date) > | < Previous (in thread) | Next (in thread) > | Messages - Most Recent First | Threads - Most Recent First

[EP-tech] Problem with secured documents and differing HTTP/HTTPS domain names?

I think we have a problem with secured documents when EPrints is configured to use different domain names for HTTP and HTTPS.

 

The background is that we have a server called http://researchdata.uwe.ac.uk over HTTP and https://eprints.uwe.ac.uk/datasecure over HTTPS. We’ve uploaded a document to a user buffer. When you click on the link to download the document from, say,

 

https://eprints.uwe.ac.uk/datasecure/cgi/users/home?screen=EPrint::View&eprintid=10#t

 

the browser goes into an infinite loop as shown by Live HTTP headers:

 

http://researchdata.uwe.ac.uk/10/1/Lorem%20ipsum.doc

 

GET /10/1/Lorem%20ipsum.doc HTTP/1.1

Host: researchdata.uwe.ac.uk

 

HTTP/1.1 302 Need to login first

Date: Tue, 03 Jul 2012 14:26:19 GMT

Server: Apache/2.2.14 (Ubuntu)

Location: /cgi/users/login?target=http%3A%2F%2Fresearchdata.uwe.ac.uk%2F10%2F1%2FLorem%2520ipsum.doc

----------------------------------------------------------

http://researchdata.uwe.ac.uk/cgi/users/login?target=http%3A%2F%2Fresearchdata.uwe.ac.uk%2F10%2F1%2FLorem%2520ipsum.doc

 

GET /cgi/users/login?target=http%3A%2F%2Fresearchdata.uwe.ac.uk%2F10%2F1%2FLorem%2520ipsum.doc HTTP/1.1

Host: researchdata.uwe.ac.uk

 

HTTP/1.1 302 Found

Date: Tue, 03 Jul 2012 14:26:19 GMT

Server: Apache/2.2.14 (Ubuntu)

Location: https://eprints.uwe.ac.uk/datasecure/cgi/users/login?target=http%3A%2F%2Fresearchdata.uwe.ac.uk%2F10%2F1%2FLorem%2520ipsum.doc

----------------------------------------------------------

https://eprints.uwe.ac.uk/datasecure/cgi/users/login?target=http%3A%2F%2Fresearchdata.uwe.ac.uk%2F10%2F1%2FLorem%2520ipsum.doc

 

GET /datasecure/cgi/users/login?target=http%3A%2F%2Fresearchdata.uwe.ac.uk%2F10%2F1%2FLorem%2520ipsum.doc HTTP/1.1

Host: eprints.uwe.ac.uk

 

HTTP/1.1 302 Moved

Date: Tue, 03 Jul 2012 14:26:19 GMT

Server: Apache/2.2.14 (Ubuntu)

Location: http://researchdata.uwe.ac.uk/10/1/Lorem%20ipsum.doc

 

If I manually change the document URL to http://eprints.uwe.ac.uk/datasecure/10/1/Lorem%20ipsum.doc, it works fine.

 

Have I misconfigured something? Or is this a consequence of using different domain names for HTTP and HTTPS? Anything that can be done about that?

 

Fortunately our main EPrints instance works fine. It uses eprints.uwe.ac.uk for both HTTP and HTTPS. We’ve only come across this when adding a second instance.

 

Thanks,

 

Jon