<div dir="ltr"><div><div>Hi Mang Sun,<br><br></div>Have you looked at the guide for configuring HTTPS?<br><br><a href="https://github.com/archivesspace/archivesspace/blob/master/README_HTTPS.md">https://github.com/archivesspace/archivesspace/blob/master/README_HTTPS.md</a><br><br></div>Brian<br><br></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Jan 16, 2015 at 2:37 PM, Mang Sun <span dir="ltr"><<a href="mailto:mang.sun@rice.edu" target="_blank">mang.sun@rice.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">After not touching this issue for a while until yesterday, I re-picked up this issue and spent some time combing through the code and now I think the problem has been largely resolved. Actually, the directive line of AppConfig[:frontend_proxy_url] = "<a href="https://ASurl" target="_blank">https://ASurl</a>" in config.rb seemingly does not play the role as intended or I thought. Instead, it's because  the Apache Proxy does not out of box forward the protocol (here https) that was used by browser to access AS (AS does not talk to APACHE in secured mode?) to the AS application.   In order to pick up and carry this protocol info to AS, one new Apache directive line of  ' RequestHeader set X-Forwarded-Proto "https" '<br>
 is added to the Apache secured virtual host configuration and brings it into looking similar to the below.<br>
###<br>
<VirtualHost *:443><br>
RequestHeader set X-Forwarded-Proto "https"<br>
ProxyPreserveHost On<br>
....<br>
ProxyPass / <a href="http://AShostname:8080/" target="_blank">http://AShostname:8080/</a><br>
ProxyPassReverse / <a href="http://AShostname:8080/" target="_blank">http://AShostname:8080/</a><br>
ServerName AShostname<br>
</VirtualHost ><br>
####<br>
<br>
Corrections and comments are welcome.<br>
<br>
Mang Sun<br>
Rice U.<br>
<br>
<br>
On 11/20/2014 2:50 PM, Mang Sun wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Plus, the view buttons in the frontend interface also run into the same problem of https being stripped down to http.<br>
<br>
-Mang<br>
On 11/20/2014 2:11 PM, Mang Sun wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I have set up Apache as the proxy server with <a href="http://ASurl" target="_blank">http://ASurl</a> pointing to <a href="http://ASurl:8081" target="_blank">http://ASurl:8081</a> and <a href="https://ASurl" target="_blank">https://ASurl</a> pointing to <a href="http://ASurl:8080" target="_blank">http://ASurl:8080</a><br>
and also set the the following two lines in config.rb<br>
<br>
AppConfig[:frontend_proxy_url] = "<a href="https://ASurl" target="_blank">https://ASurl</a>"<br>
AppConfig[:public_proxy_url] = "<a href="http://ASurl" target="_blank">http://ASurl</a>"<br>
<br>
and seen proxy work roughly well except that the following url can't be handled well.<br>
<a href="https://ASurl/resolve/edit?uri=/repositories/2/resources/115&autoselect_repo=true" target="_blank">https://ASurl/resolve/edit?<u></u>uri=/repositories/2/resources/<u></u>115&autoselect_repo=true</a> <br>
<br>
The above link through the resolver will be redirected to <a href="http://ASurl/resources/115/edit" target="_blank">http://ASurl/resources/115/<u></u>edit</a> where https is replaced by http and we see the message of "The page you were looking for doesn't exist". The vesion of AS i am testing with is v.1.1.0.<br>
<br>
Any idea again ?<br>
<br>
Thank you<br>
<br>
Mang Sun<br>
Rice U.<br>
<br>
<br>
______________________________<u></u>_________________<br>
Archivesspace_Users_Group mailing list<br>
<a href="mailto:Archivesspace_Users_Group@lyralists.lyrasis.org" target="_blank">Archivesspace_Users_Group@<u></u>lyralists.lyrasis.org</a><br>
<a href="http://lyralists.lyrasis.org/mailman/listinfo/archivesspace_users_group" target="_blank">http://lyralists.lyrasis.org/<u></u>mailman/listinfo/<u></u>archivesspace_users_group</a><br>
<br>
</blockquote>
<br>
______________________________<u></u>_________________<br>
Archivesspace_Users_Group mailing list<br>
<a href="mailto:Archivesspace_Users_Group@lyralists.lyrasis.org" target="_blank">Archivesspace_Users_Group@<u></u>lyralists.lyrasis.org</a><br>
<a href="http://lyralists.lyrasis.org/mailman/listinfo/archivesspace_users_group" target="_blank">http://lyralists.lyrasis.org/<u></u>mailman/listinfo/<u></u>archivesspace_users_group</a><br>
<br>
</blockquote>
<br>
______________________________<u></u>_________________<br>
Archivesspace_Users_Group mailing list<br>
<a href="mailto:Archivesspace_Users_Group@lyralists.lyrasis.org" target="_blank">Archivesspace_Users_Group@<u></u>lyralists.lyrasis.org</a><br>
<a href="http://lyralists.lyrasis.org/mailman/listinfo/archivesspace_users_group" target="_blank">http://lyralists.lyrasis.org/<u></u>mailman/listinfo/<u></u>archivesspace_users_group</a><br>
</blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature">Brian Hoffman<br><a href="mailto:brianjhoffman@gmail.com">brianjhoffman@gmail.com</a></div>
</div>