[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[EP-tech] Enable SSL on new server



Hi James,

Assuming removing that line was the only thing to change between when it 
wasn't working to when it was, I can only think that you did not have 
the Headers module enabled.? I am not sure what Linux OS you are 
running.? I can see that RHEL-based Linux looks to have this Headers 
module enabled by default but on Ubuntu Linux this looks to be available 
but disabled by default.? Assuming you are running Ubuntu or some other 
Debian based Linux, you can enable the Headers module with the command:

a2enmod headers

Once you have done this, you should be able to add the Header line back 
in.? However, I would have expected either the configuration to report 
as broken if you tested this before reloading or if you did 
reload/restart Apache this should have failed, as the command would not 
have been recognised.

If this advice does not help you fix the issue, please tell me what 
Linux OS and version you are running, as that may help me get a better 
idea what is wrong.

Regards

David Newman

On 30/05/2022 8:06 pm, James Kerwin wrote:
> *CAUTION:* This e-mail originated outside the University of Southampton.
> Hi David,
>
> Thanks for your response and checking it. In all my messing about I've 
> done something that's fixed it. The last line I removed from my secure 
> config file within the last hour was:
>
> Header always set Strict-Transport-Security "max-age=15768000"
>
> and that's enabled the "http with internal https" by the looks of 
> it.(option 2 
> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.eprints.org%2Fw%2FSimplified_HTTPS_Configuration%23HTTPS_When_You_Login&data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Q4466w8O%2FHq5oUB2z%2FiCCSjX9vYLRpd6l9dQtDgAUxY%3D&reserved=0 
> <https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.eprints.org%2Fw%2FSimplified_HTTPS_Configuration%23HTTPS_When_You_Login&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=Q4466w8O%2FHq5oUB2z%2FiCCSjX9vYLRpd6l9dQtDgAUxY%3D&amp;reserved=0>)
>
> Although that is currently in the config of another server with?our 
> eprints repository on so I don't think it shouldn't be there. I think 
> I'm happy with it for today, I've been trying to fix this one thing 
> since 9am!
>
> Thanks,
> James
>
> On Mon, May 30, 2022 at 7:48 PM David R Newman <drn at ecs.soton.ac.uk> 
> wrote:
>
>     Hi James,
>
>     Exactly which "EPrints pages" are you referring?? I have just
>     clicking on the link on the homepage (both on HTTP and HTTPS) to
>     take me to https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatacat.liverpool.ac.uk%2Fview&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=yPLTCtdZMF%2FZJVEyT4x%2Ft5wOl%2Bg8bP6dHMwMDwsIApU%3D&amp;reserved=0
>     <https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatacat.liverpool.ac.uk%2Fview&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=yPLTCtdZMF%2FZJVEyT4x%2Ft5wOl%2Bg8bP6dHMwMDwsIApU%3D&amp;reserved=0>
>     and it looks to be working fine in FireFox and Chrome (latest
>     versions for Windows 10).? Have you managed to fix things?? If
>     not, my best guess is your browser is caching and giving you the
>     404 error page.
>
>     Regards
>
>     David Newman
>
>     On 30/05/2022 6:42 pm, James Kerwin via Eprints-tech wrote:
>>     *CAUTION:* This e-mail originated outside the University of
>>     Southampton.
>>     Hi,
>>
>>     I'm in the very final stages of a server rebuild/upgrade (and I
>>     can't wait to hand?it?back to the owners). Got an eprints
>>     repository for our data sets up and running. I am really
>>     struggling with getting SSL to work. I've followed the
>>     instructions available through the EPrints pages, but it just
>>     isn't working.
>>
>>     At the moment if I click on a https link
>>     (https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatacat.liverpool.ac.uk%2Fview&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=yPLTCtdZMF%2FZJVEyT4x%2Ft5wOl%2Bg8bP6dHMwMDwsIApU%3D&amp;reserved=0
>>     <https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatacat.liverpool.ac.uk%2Fview&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=yPLTCtdZMF%2FZJVEyT4x%2Ft5wOl%2Bg8bP6dHMwMDwsIApU%3D&amp;reserved=0>)
>>     I get:
>>     "404 page not found on this server".
>>
>>     In Chrome it does indicate that there is a valid certificate.
>>     It's the same security certificate as on the previous server, but
>>     all the server details are the same. Plus I'd expect to be told
>>     there is a problem with the certificate if they weren't working.
>>
>>     Going to the https of the homepage I receive the default apache
>>     index page:
>>
>>     https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatacat.liverpool.ac.uk%2F&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=maYY%2BI9SX4FPHdwKGMwh0EKbtUVAwOd3BCjyNP%2BLvtY%3D&amp;reserved=0
>>     <https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatacat.liverpool.ac.uk%2F&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=maYY%2BI9SX4FPHdwKGMwh0EKbtUVAwOd3BCjyNP%2BLvtY%3D&amp;reserved=0>
>>
>>     Clicking on links, they automatically take me to https, but it 404s.
>>
>>     Any advice for what I've missed? I'm in developer mode for now,
>>     but I am being careful to restart apache and regenerate static
>>     pages after making changes. It's eprints 3.4, apache and Ubuntu 20.
>>
>>     Thanks,
>>     James
>>
>>     *** Options:http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
>>     *** Archive:https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=zsH353R8zqA9fGRjguDzdhhsLm5oNt1%2B2yaaqFBufMM%3D&amp;reserved=0  <https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=zsH353R8zqA9fGRjguDzdhhsLm5oNt1%2B2yaaqFBufMM%3D&amp;reserved=0>
>>     *** EPrints community wiki:https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=z4196UKBahX9Zb1fcPtVIOZic4AOAiTWPjnGQQgZwGk%3D&amp;reserved=0  <https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&amp;data=05%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C1c7abab4268346d4525d08da427216ff%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637895355013695587%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=z4196UKBahX9Zb1fcPtVIOZic4AOAiTWPjnGQQgZwGk%3D&amp;reserved=0>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/eprints-tech/attachments/20220530/7ed57b34/attachment-0001.html