<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}
@font-face
{font-family:"MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"\@MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}
@font-face
{font-family:Georgia;
panose-1:2 4 5 2 5 4 5 2 3 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Georgia","serif";
color:#0F243E;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Georgia","serif";
color:#0F243E;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-AU link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-family:"Georgia","serif";color:#0F243E'>For those interested in this topic, it turns out that EPrints::Apache::apache_secure_conf generates a <Location "$https_root"/> block which includes the EPrints_ArchiveID variable. However if $https_root ne $http_root, there is no equivalent block (or EPrints_ArchiveID variable) for the "$http_root" location. So HTTPS requests to locations under $http_root (but not $https_root) are not handled by EPrints.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Georgia","serif";color:#0F243E'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Georgia","serif";color:#0F243E'>I’ve logged this as <a href="https://github.com/eprints/eprints/issues/366">https://github.com/eprints/eprints/issues/366</a> and will start exploring the fix (straight-forward) and potential implications (not so straight-forward.)<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Georgia","serif";color:#0F243E'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Georgia","serif";color:#0F243E'>Cheers<o:p></o:p></span></p><div><p class=MsoNormal><span style='font-size:6.0pt;font-family:"Verdana","sans-serif";color:#003366;mso-fareast-language:EN-AU'>-- <o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><b><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";color:#7A7A7A;mso-fareast-language:EN-AU'>Matthew</span></b><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";color:#7A7A7A;mso-fareast-language:EN-AU'> <b>Kerwin</b></span><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";color:#F4F4F4;mso-fareast-language:EN-AU'> </span><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";color:#7A7A7A;mso-fareast-language:EN-AU'>| QUT Library eServices | <u><a href="mailto:matthew.kerwin@qut.edu.au"><span style='color:#7A7A7A'>matthew.kerwin@qut.edu.au</span></a></u></span><span style='font-size:7.5pt;font-family:"Verdana","sans-serif";color:#7A7A7A;mso-fareast-language:EN-AU'><o:p></o:p></span></p></div><p class=MsoNormal><span style='font-family:"Georgia","serif";color:#0F243E'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-language:EN-AU'>From:</span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-language:EN-AU'> eprints-tech-bounces@ecs.soton.ac.uk [mailto:eprints-tech-bounces@ecs.soton.ac.uk] <b>On Behalf Of </b>Matthew Kerwin<br><b>Sent:</b> Monday, 23 November 2015 12:34<br><b>To:</b> eprints-tech@ecs.soton.ac.uk<br><b>Subject:</b> [EP-tech] repos with a mix of HTTP and HTTPS<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-family:"Georgia","serif";color:#0F243E'>Hi EPrintsers, I have a query about serving a repository with a mix of HTTP and HTTPS.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Georgia","serif";color:#0F243E'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Georgia","serif";color:#0F243E'>Currently our two repositories have a pretty standard setup: the bulk of the site is served over plaintext HTTP, including untrusted session cookies. Secure/administrative functions are served over HTTPS.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Georgia","serif";color:#0F243E'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Georgia","serif";color:#0F243E'>We want to reconfigure the server to use HTTPS for the entire site (for various reasons, Google search rankings high amongst them.) However we want to retain the option of plaintext HTTP access so that some less modern external indexers and crawlers can continue to do their thing.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Georgia","serif";color:#0F243E'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Georgia","serif";color:#0F243E'>I should point out that our primary repository predates EPrints 3.2, and likely includes a bunch of legacy features and obscure customisations, so what I’m describing may be available out of the box with a fresh install but lost to us personally. However if not, does anybody have any experience doing what I’ve described?<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Georgia","serif";color:#0F243E'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Georgia","serif";color:#0F243E'>Do you have any pointers on what to en/disable in config, or what to tweak (and where) to make the entire site HTTPS-by-default while retaining the option for standard HTTP browsing of “insecure” content?<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Georgia","serif";color:#0F243E'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Georgia","serif";color:#0F243E'>Cheers<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:6.0pt;font-family:"Verdana","sans-serif";color:#003366;mso-fareast-language:EN-AU'>-- <o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><b><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";color:#7A7A7A;mso-fareast-language:EN-AU'>Matthew</span></b><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";color:#7A7A7A;mso-fareast-language:EN-AU'> <b>Kerwin</b> | Senior Web Developer |</span><span style='font-size:10.0pt;font-family:"MS Gothic";color:#F4F4F4;mso-fareast-language:EN-AU'> </span><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";color:#7A7A7A;mso-fareast-language:EN-AU'><a href="https://wiki.qut.edu.au/display/lib/Digital+Repository+Team" title="Digital Repository Team"><span style='color:#7A7A7A;text-decoration:none'>Applications & Development Team</span></a> | Library eServices | Queensland University of Technology | Level 3, R Block, Kelvin Grove | <u><a href="mailto:matthew.kerwin@qut.edu.au"><span style='color:#7A7A7A'>matthew.kerwin@qut.edu.au</span></a></u> | </span><span style='font-size:7.5pt;font-family:"Verdana","sans-serif";color:#7A7A7A;mso-fareast-language:EN-AU'>CRICOS No 00213J<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>