Jayan,
I can't see how HTTPS would affect OAI-PMH as long as your Tomcat is
configured with both HTTP and HTTPS connectors. You'll get problems only
if you disable the plain HTTP connector altogether (OAI-PMH needs to run
over plain HTTP as far as I know)
-mathias
From: Jayan Chirayath Kurian [mailto:[EMAIL PROTECTED]
Sent: 11. maaliskuuta 2008 12:49
To: Mathias Hjelt; [email protected]
Subject: RE: [Dspace-tech] Forcing HTTP for everything except login
Hello,
I too had experienced the same redirection issue. Have not started using
HTTPS since I am not sure whether this will have an impact on using
OAI-PMH. Please comment.
________________________________
From: [EMAIL PROTECTED] on behalf of Mathias
Hjelt
Sent: Tue 3/11/2008 6:43 PM
To: [email protected]
Subject: [Dspace-tech] Forcing HTTP for everything except login
Hello
Using DSpace 1.4.2 and Tomcat5, I enabled HTTPS for the password-related
pages/servlets by following the instructions at
http://wiki.dspace.org/index.php/ServletSecurity. This works fairly
well, i.e. the user is automatically redirected to HTTPS while logging
in, and after successful authentication he somehow gets redirected back
to plain HTTP.
However, in some situations the user gets "stuck" on the https site
(which causes an unnecessary burden on the server). E.g. if an
authenticated user clicks on Edit Profile (/profile) servlet, he's
redirected to HTTPS and never gets back to HTTP.
Does anyone have a neat and easy solution to this? Or an explanation of
how the redirecting-back-to-http-after-logging-in is implemented?
(I know that this issue could be avoided by doing the entire SSL thing
in Apache running a mod_jk connector as a front-end for Tomcat, but I'd
like to keep the setup nice and clean -- which means leaving Apache out
of the game.)
Best regards
Mathias Hjelt
------------------------------------------------------------------------
-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
DSpace-tech mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspace-tech
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
DSpace-tech mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspace-tech
