Hi Vinay, We have apache httpd running in front of tomcat. They are connected together via ajp. Our configuration is a little different than what is in the DSpace installation guide. The good thing is that you can search the internet for solutions about how to do that in general, as opposed to just DSpace specific. Below are trimmed down versions of our virtual hosts in httpd.conf. We didn't have to change our tomcat setup to enable SSL (only changed httpd).
This pages might be useful. In addition to the official documentation, I found this wiki very helpful in general for setting up DSpace. http://wiki.lib.sun.ac.za/index.php?title=SUNScholar/Prepare_Ubuntu/S05/Ubuntu-14.04 http://wiki.lib.sun.ac.za/index.php?title=SUNScholar/Secure_Internet_Connections Tom <VirtualHost *:80> ServerName scholarship.tricolib.brynmawr.edu ErrorLog /var/log/httpd/scholarship.tricolib.brynmawr.edu-error.log CustomLog /var/log/httpd/scholarship.tricolib.brynmawr.edu-access.log combined LogLevel warn Redirect /dspace https://scholarship.tricolib.brynmawr.edu Redirect / https://scholarship.tricolib.brynmawr.edu/ </VirtualHost> <VirtualHost *:443> UseCanonicalName On # Obviously, replace the ServerName with your DSpace site URL ServerName scholarship.tricolib.brynmawr.edu ErrorLog /var/log/httpd/scholarship.tricolib.brynmawr.edu-ssl-error.log CustomLog /var/log/httpd/scholarship.tricolib.brynmawr.edu-ssl-access.log combined LogLevel warn # Configure your SSL Certificate (you must create one, obviously) # See the "keytool" instructions above for examples of creating this certifi$ # There are also many good guides on the web for generating SSL certificates$ SSLEngine on SSLCertificateFile /etc/letsencrypt/live/scholarship.tricolib.brynmawr.edu/cert.pem SSLCertificateKeyFile /etc/letsencrypt/live/scholarship.tricolib.brynmawr.edu/privkey.pem SSLCertificateChainFile /etc/letsencrypt/live/scholarship.tricolib.brynmawr.edu/chain.pem ProxyPass / ajp://localhost:8009/ ProxyPassReverse / ajp://localhost:8009/ #Note we are running 2.2 # http://httpd.apache.org/docs/2.2/mod/mod_proxy.html </VirtualHost> On Thu, Aug 24, 2017 at 11:36 AM, aade13 <[email protected]> wrote: > Hello Vinay, > > How is your tomcat and apache set up? Is tomcat behind apache? > > I had the same issue achieving the SSL result initially and tomcat being > behind apache in my case. This means that the entire SSL configuration is > done on apache and AJP port is used on tomcat. If this is your > configuration, kindly use Proxy which will solve this issue. > > Kindly let me know if your configuration is like what I described above and > I will be more than happy to share my notes with you on this. > > Thanks, Ade. > > On Thursday, August 24, 2017 at 6:04:19 AM UTC-5, Vinay Sharma wrote: >> >> Dear All, >> >> We have configured Dspace 4.2 on apache-tomcat-7.0.54. Now, we want to >> make it SSL enable, in this reference we bought the necessary certificate >> and key. The URL is working fine with https:// but each time we have to type >> it https:// it is not forcefully redirecting from http to https. >> >> I have search many documentation on web and accordingly made changes in >> tomcat server.xml file but no result. >> >> Can anyone please help me? >> >> regards >> Vinay Kumar Sharma >> Librarian >> Sarath Engineering and Technology >> N.H. - 08, Nr. Chiloda >> Himatnagar-383125 >> Gujarat > > -- > You received this message because you are subscribed to the Google Groups > "DSpace Technical Support" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > Visit this group at https://groups.google.com/group/dspace-tech. > For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/dspace-tech. For more options, visit https://groups.google.com/d/optout.
