EPrints Technical Mailing List Archive

Message: #07093

< Previous (by date) | Next (by date) > | < Previous (in thread) | Next (in thread) > | Messages - Most Recent First | Threads - Most Recent First

[EP-tech] setup ssl eprints

Eprints 3.3.15

This: https://wiki.eprints.org/w/How_to_use_EPrints_with_HTTPS
does not work, I get redirect always to http if I don't set the secure path. If I set the secure path, I get to https login but all the links then point to http. Login redirects me again to login. Also generate_apacheconf does not generate any virtual host for https but just: 

===

#
# secure.conf include file for researchdata
#
# Any changes made here will be lost if you run generate_apacheconf
# with the --replace option
#

  <Location "">
    PerlSetVar EPrints_ArchiveID researchdata
    PerlSetVar EPrints_Secure yes

    Options +ExecCGI
    <IfModule mod_authz_core.c>
       Require all granted
    </IfModule>
    <IfModule !mod_authz_core.c>
       Order allow,deny
       Allow from all
    </IfModule>
  </Location>
===
So I've found that you've to use the default ssl config of apache, and add there a 

Include /usr/share/eprints3/cfg/apache_ssl.conf
and now it mostly works. The strange think is that some links are as http, and when you  click on it, the server issue a Location: https to the same address...
One issue is on login, it points to http instead of https. How can I change it to go directly to https, so my credentials are not exposed in the network? Is there a simple and recent guide about setting https on eprints? Thanks.