[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[EP-tech] Enable SSL on new server
- Subject: [EP-tech] Enable SSL on new server
- From: drn at ecs.soton.ac.uk (David R Newman)
- Date: Mon, 30 May 2022 20:24:57 +0100
- In-reply-to: <CAKkNZ9BvaRMUS4kp=gc=SwQUnJYwFyL3s2A+PkWF+5wpxgTz+g@mail.gmail.com>
- References: <CAKkNZ9AC+1QgvU594CFpNSoQ9c3SrXMjd+gAS4gqdi89_VDD9g@mail.gmail.com> <f564b48c-757c-1f27-488d-78d0838a9425@ecs.soton.ac.uk> <CAKkNZ9BvaRMUS4kp=gc=SwQUnJYwFyL3s2A+PkWF+5wpxgTz+g@mail.gmail.com> <a6412bdc-d9cf-cd8a-fc12-f564675085c1@ecs.soton.ac.uk>
Hi James,
Assuming removing that line was the only thing to change between when it
wasn't working to when it was, I can only think that you did not have
the Headers module enabled.? I am not sure what Linux OS you are
running.? I can see that RHEL-based Linux looks to have this Headers
module enabled by default but on Ubuntu Linux this looks to be available
but disabled by default.? Assuming you are running Ubuntu or some other
Debian based Linux, you can enable the Headers module with the command:
a2enmod headers
Once you have done this, you should be able to add the Header line back
in.? However, I would have expected either the configuration to report
as broken if you tested this before reloading or if you did
reload/restart Apache this should have failed, as the command would not
have been recognised.
If this advice does not help you fix the issue, please tell me what
Linux OS and version you are running, as that may help me get a better
idea what is wrong.
Regards
David Newman
On 30/05/2022 8:06 pm, James Kerwin wrote:
> *CAUTION:* This e-mail originated outside the University of Southampton.
> Hi David,
>
> Thanks for your response and checking it. In all my messing about I've
> done something that's fixed it. The last line I removed from my secure
> config file within the last hour was:
>
> Header always set Strict-Transport-Security "max-age=15768000"
>
> and that's enabled the "http with internal https" by the looks of
> it.(option 2
> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.eprints.org%2Fw%2FSimplified_HTTPS_Configuration%23HTTPS_When_You_Login&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Q4466w8O%2FHq5oUB2z%2FiCCSjX9vYLRpd6l9dQtDgAUxY%3D&reserved=0
> <https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.eprints.org%2Fw%2FSimplified_HTTPS_Configuration%23HTTPS_When_You_Login&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Q4466w8O%2FHq5oUB2z%2FiCCSjX9vYLRpd6l9dQtDgAUxY%3D&reserved=0>)
>
> Although that is currently in the config of another server with?our
> eprints repository on so I don't think it shouldn't be there. I think
> I'm happy with it for today, I've been trying to fix this one thing
> since 9am!
>
> Thanks,
> James
>
> On Mon, May 30, 2022 at 7:48 PM David R Newman <drn at ecs.soton.ac.uk>
> wrote:
>
> Hi James,
>
> Exactly which "EPrints pages" are you referring?? I have just
> clicking on the link on the homepage (both on HTTP and HTTPS) to
> take me to https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatacat.liverpool.ac.uk%2Fview&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=yPLTCtdZMF%2FZJVEyT4x%2Ft5wOl%2Bg8bP6dHMwMDwsIApU%3D&reserved=0
> <https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatacat.liverpool.ac.uk%2Fview&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=yPLTCtdZMF%2FZJVEyT4x%2Ft5wOl%2Bg8bP6dHMwMDwsIApU%3D&reserved=0>
> and it looks to be working fine in FireFox and Chrome (latest
> versions for Windows 10).? Have you managed to fix things?? If
> not, my best guess is your browser is caching and giving you the
> 404 error page.
>
> Regards
>
> David Newman
>
> On 30/05/2022 6:42 pm, James Kerwin via Eprints-tech wrote:
>> *CAUTION:* This e-mail originated outside the University of
>> Southampton.
>> Hi,
>>
>> I'm in the very final stages of a server rebuild/upgrade (and I
>> can't wait to hand?it?back to the owners). Got an eprints
>> repository for our data sets up and running. I am really
>> struggling with getting SSL to work. I've followed the
>> instructions available through the EPrints pages, but it just
>> isn't working.
>>
>> At the moment if I click on a https link
>> (https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatacat.liverpool.ac.uk%2Fview&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=yPLTCtdZMF%2FZJVEyT4x%2Ft5wOl%2Bg8bP6dHMwMDwsIApU%3D&reserved=0
>> <https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatacat.liverpool.ac.uk%2Fview&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=yPLTCtdZMF%2FZJVEyT4x%2Ft5wOl%2Bg8bP6dHMwMDwsIApU%3D&reserved=0>)
>> I get:
>> "404 page not found on this server".
>>
>> In Chrome it does indicate that there is a valid certificate.
>> It's the same security certificate as on the previous server, but
>> all the server details are the same. Plus I'd expect to be told
>> there is a problem with the certificate if they weren't working.
>>
>> Going to the https of the homepage I receive the default apache
>> index page:
>>
>> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatacat.liverpool.ac.uk%2F&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=maYY%2BI9SX4FPHdwKGMwh0EKbtUVAwOd3BCjyNP%2BLvtY%3D&reserved=0
>> <https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatacat.liverpool.ac.uk%2F&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=maYY%2BI9SX4FPHdwKGMwh0EKbtUVAwOd3BCjyNP%2BLvtY%3D&reserved=0>
>>
>> Clicking on links, they automatically take me to https, but it 404s.
>>
>> Any advice for what I've missed? I'm in developer mode for now,
>> but I am being careful to restart apache and regenerate static
>> pages after making changes. It's eprints 3.4, apache and Ubuntu 20.
>>
>> Thanks,
>> James
>>
>> *** Options:http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
>> *** Archive:https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=zsH353R8zqA9fGRjguDzdhhsLm5oNt1%2B2yaaqFBufMM%3D&reserved=0 <https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=zsH353R8zqA9fGRjguDzdhhsLm5oNt1%2B2yaaqFBufMM%3D&reserved=0>
>> *** EPrints community wiki:https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=z4196UKBahX9Zb1fcPtVIOZic4AOAiTWPjnGQQgZwGk%3D&reserved=0 <https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=z4196UKBahX9Zb1fcPtVIOZic4AOAiTWPjnGQQgZwGk%3D&reserved=0>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/eprints-tech/attachments/20220530/7ed57b34/attachment-0001.html