HTTPS for Debian/Ubuntu - Revision history

Tdb01r: /* Setting up the SSL Virtual Host */

2011-10-14T09:06:15Z

Setting up the SSL Virtual Host

← Older revision		Revision as of 09:06, 14 October 2011
Line 44:		Line 44:
	SSLEngine on		SSLEngine on
	SSLCertificateFile /etc/apache2/ssl/apache.pem		SSLCertificateFile /etc/apache2/ssl/apache.pem
	Include /usr/share/eprints3/~~archives~~/~~ARCHIVEID/var/auto-secure~~.conf		Include /usr/share/eprints3/cfg/apache_ssl.conf
	</VirtualHost>		</VirtualHost>

Pm705 at 12:32, 20 March 2010

2010-03-20T12:32:56Z

← Older revision		Revision as of 12:32, 20 March 2010
Line 1:		Line 1:
	[[Category:~~Configuration~~]]		[[Category:Authentication]]
	[[Category:Debian_and_Ubuntu]]		[[Category:Debian_and_Ubuntu]]
	=EPrints Configuration=		=EPrints Configuration=

Pm705 at 15:09, 8 February 2010

2010-02-08T15:09:42Z

← Older revision		Revision as of 15:09, 8 February 2010
Line 1:		Line 1:
			[[Category:Configuration]]
			[[Category:Debian_and_Ubuntu]]
	=EPrints Configuration=		=EPrints Configuration=
	This is still the same process as the standard HTTPS setup. Add the following lines to ''archive/ARCHIVEID/cfg/cfg.d/10_core.pl'';		This is still the same process as the standard HTTPS setup. Add the following lines to ''archive/ARCHIVEID/cfg/cfg.d/10_core.pl'';

Mmr@ecs.soton.ac.uk: /* EPrints Configuration */

2009-12-04T13:11:07Z

EPrints Configuration

← Older revision		Revision as of 13:11, 4 December 2009
Line 1:		Line 1:
	=EPrints Configuration=		=EPrints Configuration=
	This is still the same process as the standard HTTPS setup. Add the following lines to ''archive/ARCHIVEID/cfg/cfg.d/10_core.pl'';		This is still the same process as the standard HTTPS setup. Add the following lines to ''archive/ARCHIVEID/cfg/cfg.d/10_core.pl'';
	~~<nowiki>~~
	$c->{securehost} = 'example.com';		$c->{securehost} = 'example.com';
	$c->{secureport} = 443;		$c->{secureport} = 443;
	$c->{securepath} = '/secure';		$c->{securepath} = '/secure';

	$c->{http_root} = '';		$c->{http_root} = <nowiki>''</nowiki>;
	$c->{https_root} = '';		$c->{https_root} = <nowiki>''</nowiki>;
	$c->{http_cgiroot} = '/cgi';		$c->{http_cgiroot} = '/cgi';
	$c->{https_cgiroot} = '/cgi';		$c->{https_cgiroot} = '/cgi';
	~~</nowiki>~~
	Next you need to run the generate_apacheconf command;		Next you need to run the generate_apacheconf command;

Mmr@ecs.soton.ac.uk: /* EPrints Configuration */

2009-12-04T13:10:29Z

EPrints Configuration

← Older revision		Revision as of 13:10, 4 December 2009
Line 1:		Line 1:
	=EPrints Configuration=		=EPrints Configuration=
	This is still the same process as the standard HTTPS setup. Add the following lines to ''archive/ARCHIVEID/cfg/cfg.d/10_core.pl'';		This is still the same process as the standard HTTPS setup. Add the following lines to ''archive/ARCHIVEID/cfg/cfg.d/10_core.pl'';
			<nowiki>
	$c->{securehost} = 'example.com';		$c->{securehost} = 'example.com';
	$c->{secureport} = 443;		$c->{secureport} = 443;
Line 10:		Line 10:
	$c->{http_cgiroot} = '/cgi';		$c->{http_cgiroot} = '/cgi';
	$c->{https_cgiroot} = '/cgi';		$c->{https_cgiroot} = '/cgi';
			</nowiki>
	Next you need to run the generate_apacheconf command;		Next you need to run the generate_apacheconf command;

Mmr@ecs.soton.ac.uk at 14:28, 12 November 2009

2009-11-12T14:28:35Z

← Older revision		Revision as of 14:28, 12 November 2009
Line 1:		Line 1:
	=EPrints Configuration=		=EPrints Configuration=
	This is still the same process as the standard HTTPS setup. Add the following lines to archive/ARCHIVEID/cfg/cfg.d/10_core.pl;		This is still the same process as the standard HTTPS setup. Add the following lines to ''archive/ARCHIVEID/cfg/cfg.d/10_core.pl'';

	$c->{securehost} = 'example.com';		$c->{securehost} = 'example.com';
Line 20:		Line 20:

	==Generating the SSL certificate==		==Generating the SSL certificate==
	The first thing you need to do is install the ~~ssl~~ certificate generator if you don't already have it;		The first thing you need to do is install the SSL certificate generator if you don't already have it;

	sudo apt-get install ssl-cert		sudo apt-get install ssl-cert

	Next make a directory for all your ~~ssl~~ certificates in your apache2 directory;		Next make a directory for all your SSL certificates in your apache2 directory;

	sudo mkdir /etc/apache2/ssl		sudo mkdir /etc/apache2/ssl
Line 32:		Line 32:
	sudo make-ssl-cert /usr/share/ssl-cert/ssleay.cnf /etc/apache2/ssl/apache.pem		sudo make-ssl-cert /usr/share/ssl-cert/ssleay.cnf /etc/apache2/ssl/apache.pem

	==Setting up ~~Apache2~~==		==Setting up the SSL Virtual Host==
	Now enable the module for apache2 which should already be installed as part of the apache2 package;		Now enable the module for apache2 which should already be installed as part of the apache2 package;

	sudo a2enmod ssl		sudo a2enmod ssl

	We now need to create a new virtualhost since EPrints makes some assumptions about the existence of the ~~ssl~~ virtualhost, but it does not exist on Debian/Ubuntu.		We now need to create a new virtualhost since EPrints makes some assumptions about the existence of the SSL virtualhost, but it does not exist on Debian/Ubuntu. Create a new file in ''/etc/apache2/sites-available/eprints3-ssl'', in this file you want to put the following;

			<VirtualHost *:443>
			SSLEngine on
			SSLCertificateFile /etc/apache2/ssl/apache.pem
			Include /usr/share/eprints3/archives/ARCHIVEID/var/auto-secure.conf
			</VirtualHost>

			Once you have done this enable the site;

			sudo a2ensite eprints3-ssl

			Then restart apache2 in the standard way;

			sudo /etc/init.d/apache2 restart

			=Conclusion=
			That should be everything set up for EPrints to operate over https. If you followed the configuration options outlined on this page then your https repository should be running at ''https://example.com/'' whilst the traditional ''http://example.com/'' repository remains intact.

Mmr@ecs.soton.ac.uk at 12:28, 12 November 2009

2009-11-12T12:28:31Z

← Older revision		Revision as of 12:28, 12 November 2009
Line 10:		Line 10:
	$c->{http_cgiroot} = '/cgi';		$c->{http_cgiroot} = '/cgi';
	$c->{https_cgiroot} = '/cgi';		$c->{https_cgiroot} = '/cgi';

			Next you need to run the generate_apacheconf command;

			bin/generate_apacheconf

			EPrints should now be ready for SSL.

			=Apache Configuration=

			==Generating the SSL certificate==
			The first thing you need to do is install the ssl certificate generator if you don't already have it;

			sudo apt-get install ssl-cert

			Next make a directory for all your ssl certificates in your apache2 directory;

			sudo mkdir /etc/apache2/ssl

			Now we can generate the certificate;

			sudo make-ssl-cert /usr/share/ssl-cert/ssleay.cnf /etc/apache2/ssl/apache.pem

			==Setting up Apache2==
			Now enable the module for apache2 which should already be installed as part of the apache2 package;

			sudo a2enmod ssl

			We now need to create a new virtualhost since EPrints makes some assumptions about the existence of the ssl virtualhost, but it does not exist on Debian/Ubuntu.

Mmr@ecs.soton.ac.uk: New page: =EPrints Configuration= This is still the same process as the standard HTTPS setup. Add the following lines to archive/ARCHIVEID/cfg/cfg.d/10_core.pl; $c->{securehost} = 'example.com'; ...

2009-11-12T12:20:03Z

New page: =EPrints Configuration= This is still the same process as the standard HTTPS setup. Add the following lines to archive/ARCHIVEID/cfg/cfg.d/10_core.pl; $c->{securehost} = 'example.com'; ...

New page

=EPrints Configuration=
This is still the same process as the standard HTTPS setup. Add the following lines to archive/ARCHIVEID/cfg/cfg.d/10_core.pl;

$c->{securehost} = 'example.com';
$c->{secureport} = 443;
$c->{securepath} = '/secure';

$c->{http_root} = '';
$c->{https_root} = '';
$c->{http_cgiroot} = '/cgi';
$c->{https_cgiroot} = '/cgi';