On Tue, 20 Dec 2011, Lanxin Ma wrote: > what should I do if I want to use https at all pages, for example: > https://invenio100.ihep.ac.cn/? ?
Do you mean you would like to use HTTPS everywhere even for guest users and help pages? In that case, you can set your CFG_SITE_URL to be `https://...' as well. Or would you like to have HTTPS everywhere only for logged-in users? Invenio v1.0.0-rc0 indeed uses HTTPS for some pages only (personal ones such as login, baskets, messages, etc); but recently we've made a change that keeps HTTPS for everything once a user is logged in. (See commit c1e3691cc782e.) This is available in the Invenio master branch already and will be part of the next Invenio v1.0.0 release. Best regards -- Tibor Simko

