Https3 - Revision history

Pm705 at 12:35, 20 March 2010

2010-03-20T12:35:18Z

← Older revision		Revision as of 12:35, 20 March 2010
Line 1:		Line 1:
	[[Category:~~Configuration]]~~		[[Category:Authentication]]
	~~[[Category:Howto~~]]
	== Introduction ==		== Introduction ==

Pm705 at 15:57, 8 February 2010

2010-02-08T15:57:35Z

← Older revision		Revision as of 15:57, 8 February 2010
Line 1:		Line 1:
			[[Category:Configuration]]
			[[Category:Howto]]
	== Introduction ==		== Introduction ==

Line 356:		Line 358:
	$imagesurl = $session->get_repository->get_conf( "securepath" )."/style/images";		$imagesurl = $session->get_repository->get_conf( "securepath" )."/style/images";
	}		}

	~~[[Category:Howto]]~~

Tdb01r at 12:45, 13 July 2009

2009-07-13T12:45:51Z

← Older revision		Revision as of 12:45, 13 July 2009
Line 356:		Line 356:
	$imagesurl = $session->get_repository->get_conf( "securepath" )."/style/images";		$imagesurl = $session->get_repository->get_conf( "securepath" )."/style/images";
	}		}

			[[Category:Howto]]

Jpl@plosquare.com: Added a mention of the directory creation and file system permissions

2009-04-24T20:18:38Z

Added a mention of the directory creation and file system permissions

← Older revision		Revision as of 20:18, 24 April 2009
Line 341:		Line 341:
	=== EPrint 1 has no directory set ===		=== EPrint 1 has no directory set ===

	If you get the message “EPrint 1 has no directory set. This is very dangerous as EPrints has no idea where to write files for this eprint. This may imply a buggy import tool or some other cause of corrupt data.” it probably ~~means that~~ you forgot to set Apache to run as eprints:eprints (or alternatively, add the Apache user to the eprints group).		If you get the message “EPrint 1 has no directory set. This is very dangerous as EPrints has no idea where to write files for this eprint. This may imply a buggy import tool or some other cause of corrupt data.”, it is most probably caused by the web server user having failed to create a target subdirectory for the new eprint under archives/archivename/documents/disk0/... due to insufficient file system permissions. Perhaps you forgot to set Apache to run as eprints:eprints (or alternatively, add the Apache user to the eprints group).

	=== Other ===		=== Other ===

Ckeene: /* Introduction */ made 3.0.5 3.1 line bold

2008-06-23T14:20:19Z

Introduction: made 3.0.5 3.1 line bold

← Older revision		Revision as of 14:20, 23 June 2008
Line 1:		Line 1:
	== Introduction ==		== Introduction ==

	EPrints 3.0.5/3.1 introduces a new mechanism to set up HTTPS that greatly simplifies the process, see [[HTTPS]].		'''EPrints 3.0.5/3.1 introduces a new mechanism to set up HTTPS that greatly simplifies the process, see [[HTTPS]].'''

Tdb01r at 16:46, 7 April 2008

2008-04-07T16:46:06Z

← Older revision		Revision as of 16:46, 7 April 2008
Line 1:		Line 1:
	== Introduction ==		== Introduction ==

			EPrints 3.0.5/3.1 introduces a new mechanism to set up HTTPS that greatly simplifies the process, see [[HTTPS]].


	Setting up EPrints3 to work with https is a little tricky. There seems to be a few bugs to be worked round. This How To considers the following scenario:		Setting up EPrints3 to work with https is a little tricky. There seems to be a few bugs to be worked round. This How To considers the following scenario:

Mans0954: /* Internet Explorer 'Secure and non Secure items' */

2007-06-27T10:23:11Z

Internet Explorer 'Secure and non Secure items'

← Older revision		Revision as of 10:23, 27 June 2007
Line 206:		Line 206:
	my $css = "";		my $css = "";
	my $secure_css ="";		my $secure_css ="";
	my $fn; my $base_url = $session->get_repository->get_conf( "base_url" );		my $fn;
			my $base_url = $session->get_repository->get_conf( "base_url" );
	my $secure_url = $session->get_repository->get_conf( "secure_url" );		my $secure_url = $session->get_repository->get_conf( "secure_url" );
	foreach my $target ( sort keys %{$map} )		foreach my $target ( sort keys %{$map} )

Mans0954: /* Internet Explorer 'Secure and non Secure items' */

2007-06-27T10:21:28Z

Internet Explorer 'Secure and non Secure items'

← Older revision		Revision as of 10:21, 27 June 2007
Line 189:		Line 189:
	</head>		</head>
	<body bgcolor="#ffffff" text="#000000">		<body bgcolor="#ffffff" text="#000000">
	<div class="ep_noprint"><noscript><style type='text/css'>@import url(<epc:print expr="$config{secure_url}"/>/style/nojs.css);</style></noscript></div>		div class="ep_noprint">
	<epc:pin ref="pagetop"/>		<noscript><style type='text/css'>@import url(<epc:print expr="$config{secure_url}"/>/style/nojs.css);</style></noscript>
	<div class="ep_tm_header ep_noprint">		</div>
	<div class="ep_tm_logo"><a href="{$config{frontpage}}"><img alt="Logo" src="{$config{secure_url}}{$config{site_logo}}" /></a></div>		<epc:pin ref="pagetop"/>
			div class="ep_tm_header ep_noprint">
			div class="ep_tm_logo"><a href="{$config{frontpage}}"><img alt="Logo" src="{$config{secure_url}}{$config{site_logo}}" /></a></div>

	also change the link to the EPrints logo in the footer:		also change the link to the EPrints logo in the footer:

	~~<div style="float: right; margin-left: 1em">~~<a href="http://eprints.org/software/"><img src="{$config{secure_url}}/images/eprintslogo.gif" border="0"/></a~~></div~~>		<a href="http://eprints.org/software/"><img src="{$config{secure_url}}/images/eprintslogo.gif" border="0"/></a>

	We now need to modify 'generate_static' to create the secure_auto.css file as well as auto.css. The relevant section should be modified like this:		We now need to modify 'generate_static' to create the secure_auto.css file as well as auto.css. The relevant section should be modified like this:

Mans0954: /* Internet Explorer 'Secure and non Secure items' */

2007-06-27T10:16:44Z

Internet Explorer 'Secure and non Secure items'

← Older revision		Revision as of 10:16, 27 June 2007
Line 175:		Line 175:
	We're not done yet! Internet Explorer complains if non-secure (http) and secure (https) items are displayed on the same page. This happens when a full url, beginning http:// is embedded in a page that is https. If the securepath and url_path variables were the same, e.g. we were using http://repos1.FQDN/repos1 and https://eprints.FQDN/repos1 then we could simply make all urls relative, but because they are different, e.g http://repos1.FQDN/ and https://eprints.FQDN/repos1 we must handle the secure and non-secure cases separately.		We're not done yet! Internet Explorer complains if non-secure (http) and secure (https) items are displayed on the same page. This happens when a full url, beginning http:// is embedded in a page that is https. If the securepath and url_path variables were the same, e.g. we were using http://repos1.FQDN/repos1 and https://eprints.FQDN/repos1 then we could simply make all urls relative, but because they are different, e.g http://repos1.FQDN/ and https://eprints.FQDN/repos1 we must handle the secure and non-secure cases separately.

	Edit /opt/eprints3/archives/repos1/cfg/lang/en/templates/secure.xml to use full https:// urls for included javascript and css. The head section should look something like this:		Edit /opt/eprints3/archives/repos1/cfg/lang/en/templates/secure.xml to use full https:// urls for included javascript and css and for the logo and .ico files. The head section should look something like this:

	<head>		<head>
Line 182:		Line 182:
	<style type="text/css" media="screen">@import url(<epc:print expr="$config{secure_url}"/>/style/secure_auto.css);</style>		<style type="text/css" media="screen">@import url(<epc:print expr="$config{secure_url}"/>/style/secure_auto.css);</style>
	<style type="text/css" media="print">@import url(<epc:print expr="$config{secure_url}"/>/style/print.css);</style>		<style type="text/css" media="print">@import url(<epc:print expr="$config{secure_url}"/>/style/print.css);</style>
	<link rel="icon" href="/favicon.ico" type="image/x-icon"/>		<link rel="icon" href="{$config{secure_url}}/favicon.ico" type="image/x-icon"/>
	<link rel="shortcut icon" href="/favicon.ico" type="image/x-icon"/>		<link rel="shortcut icon" href="{$config{secure_url}}/favicon.ico" type="image/x-icon"/>
	<link rel="Top" href="{$config{frontpage}}"/>		<link rel="Top" href="{$config{frontpage}}"/>
	<link rel="Search" href="{$config{perl_url}}/search"/>		<link rel="Search" href="{$config{perl_url}}/search"/>
Line 190:		Line 190:
	<body bgcolor="#ffffff" text="#000000">		<body bgcolor="#ffffff" text="#000000">
	<div class="ep_noprint"><noscript><style type='text/css'>@import url(<epc:print expr="$config{secure_url}"/>/style/nojs.css);</style></noscript></div>		<div class="ep_noprint"><noscript><style type='text/css'>@import url(<epc:print expr="$config{secure_url}"/>/style/nojs.css);</style></noscript></div>
			<epc:pin ref="pagetop"/>
			<div class="ep_tm_header ep_noprint">
			<div class="ep_tm_logo"><a href="{$config{frontpage}}"><img alt="Logo" src="{$config{secure_url}}{$config{site_logo}}" /></a></div>

			also change the link to the EPrints logo in the footer:

			<div style="float: right; margin-left: 1em"><a href="http://eprints.org/software/"><img src="{$config{secure_url}}/images/eprintslogo.gif" border="0"/></a></div>

	We now need to modify 'generate_static' to create the secure_auto.css file as well as auto.css. The relevant section should be modified like this:		We now need to modify 'generate_static' to create the secure_auto.css file as well as auto.css. The relevant section should be modified like this:

Mans0954: /* Missing Images */

2007-06-27T10:08:44Z

Missing Images

← Older revision		Revision as of 10:08, 27 June 2007
Line 231:		Line 231:
	=== Missing Images ===		=== Missing Images ===

	In ~~/opt/eprints3/lib/lang/en/~~phrases~~/system~~.~~xml, change the links to images~~ in ~~the following phrases to use securepath~~		A number of image links will be broken because eprints is looking for them on urlpath rather than on secureurl. In some cases this can be fixed by replacing urlpath with secureurl in the code, but some phrases may appear on both secure and insecure pages. Therefore we also need a solution which can be evaluated by a epin in a template. The cleanest way I could find of doing this is as follows:

	~~sys~~:~~ep_form_required~~		Add two methods to EPrints::Session
	~~Plugin~~/~~InputForm~~/~~Surround~~/~~Default:show_help~~
	Plugin/~~InputForm~~/~~Surround~~/~~Default:hide_help~~
			######################################################################
			=pod

			=item $foo = $session->get_baseurl()

			Gets the base url for images, depending on whether the session is secure
			or not (N.B. by secure we mean EPrints_secure is yes)
			Added by CSH 26 June 2007

			=cut
			######################################################################
			sub get_baseurl
			{
			my( $self ) = @_;

			my $esec = $self->get_request->dir_config( "EPrints_Secure" );
			if( defined $esec && $esec eq "yes" )
			{
			return $self->get_repository->get_conf( "securepath" );
			}
			else
			{
			return $self->get_repository->get_conf( "base_url" );
			}
			}

			######################################################################
			=pod

			=item $foo = $session->get_imageurl()

			Gets the base url for images, depending on whether the session is secure
			or not (N.B. by secure we mean EPrints_secure is yes)
			Added by CSH 26 June 2007

			=cut
			######################################################################
			sub get_imageurl
			{
			my( $self ) = @_;

			return $self->get_baseurl."/style/images/";
			}

			Search through the eprints code for every occurrence of the string /style/images/ and replace with a call to get_imageurl

			e.g. In /opt/eprints/perl_lib/EPrints/Plugin/Screen/Items.pm, change the line

			my $imagesurl = $self->{session}->get_repository->get_conf( "urlpath" )."/style/images";

	~~e.g. the ep_form_required phrase becomes:~~		to

	~~<epp:phrase id~~=~~"sys:ep_form_required"~~>~~<img src="{$config~~{~~securepath}~~}~~/style/images/required.png" border="0" class="ep_required" alt="Required"/~~>~~&nbsp~~;~~<epc:pin name="label"/></epp:phrase>~~		my $imagesurl = $self->{session}->get_imageurl;

	~~If some repositories aren't using https, you may prefer to override these phrases on a per repository basis.~~

	~~Change~~ the ~~links to images~~ in ~~the following phrases to use urlpath~~		We will add a variable called baseurl to the variables available in a script:

	~~lib/session~~:~~show_help~~		In the execute method of EPrints::Script, add:
	~~lib/session~~:~~hide_help~~

	~~e.g. the lib/~~session~~:show_help phrase becomes:~~		$state->{baseurl} = [$state->{session}->get_baseurl, "STRING" ];

	~~<epp:~~phrase ~~id="lib/session:show_help"><epc:pin name="link"><img alt="+" title="Show help" src="~~{$~~config{urlpath~~}~~}/style/images/help.gif" border="0"/></epc:pin></epp:phrase>~~		before the run command is called on the compiler. It will now be possible to get the url for images in a phrase through {$baseurl}

	In /opt/~~eprints~~/~~perl_lib~~/~~EPrints~~/~~Plugin~~/~~Screen~~/~~Items~~.pm, change the ~~line~~		In /opt/eprints3/lib/lang/en/phrases/system.xml, change the links to images in the following phrases to use $baseurl

	~~my $imagesurl = $self->{~~session~~}->get_repository->get_conf( "urlpath" )."~~/~~style/images";~~		sys:ep_form_required
			Plugin/InputForm/Surround/Default:show_help
			Plugin/InputForm/Surround/Default:hide_help
			lib/session:show_help
			lib/session:hide_help

	to

	~~my $imagesurl = $self->{session}->get_repository->get_conf( "securepath" )~~.~~"/style/images";~~		e.g. the ep_form_required phrase becomes:

	==== ~~Outstanding ==~~==		<epp:phrase id="sys:ep_form_required"><img src="{$baseurl}/style/images/required.png" border="0" class="ep_required" alt="Required"/> <epc:pin name="label"/></epp:phrase>

	~~render_message in Session.pm still has~~ a ~~hardcoded "/style/images/"~~. ~~Can this function be called in both the secure and insecure contexts?~~		If some repositories aren't using https, you may prefer to override these phrases on a per repository basis.

	== Troubleshooting ==		== Troubleshooting ==