<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<div style="padding-bottom: 10px; padding-top: 5px;">
<div style="padding:12px; border:1px solid #8D3970; background-color:#F7F9FA; color:#8D3970; font-size:14px; line-height:22px; font-family: Calibri, Arial, Helvetica, sans-serif;">
<strong>CAUTION:</strong> This e-mail originated outside the University of Southampton.
</div>
</div>
<div>
<div dir="ltr">Apologies, the link with the solution for the front-end is this one:
<div><br>
</div>
<div><a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgist.github.com%2Fjacobovidal%2Fef5015e4e05905c6ec684425cf30bc9b&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C86dd3cb5fe7c4c35ff7208d8b15cd2a7%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637454359518636736%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=n3ma%2BzVwy63VpHmHC%2B8tNi0xXHeddUR3OrRDaeCzfws%3D&reserved=0" originalSrc="https://gist.github.com/jacobovidal/ef5015e4e05905c6ec684425cf30bc9b" shash="ENAhJfJ+kC83OrPQIA7v5qaTmMAZnLozFNtQJH2ICa5ae2iJApSj48LW8XzT8XjgRNvRPu021cm4OEKQas5QLRnKRsEgGGyDdNQJ72F7MbLUvmAAtKkoWsD9PYE2KQcSJt4dYKJMhOapDvTtk6VNoMdAVDw2t+1NU9jDqYk5pn0=">https://gist.github.com/jacobovidal/ef5015e4e05905c6ec684425cf30bc9b</a><br>
</div>
<div><br>
</div>
<div>The stack overflow one is related (I currently have so many tabs open, hence the confusion).</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Tue, Jan 5, 2021 at 9:12 AM James Kerwin via Eprints-tech <<a href="mailto:eprints-tech@ecs.soton.ac.uk">eprints-tech@ecs.soton.ac.uk</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<div style="padding-bottom:10px;padding-top:5px">
<div style="padding:12px;border:1px solid rgb(141,57,112);background-color:rgb(247,249,250);color:rgb(141,57,112);font-size:14px;line-height:22px;font-family:Calibri,Arial,Helvetica,sans-serif">
<strong>CAUTION:</strong> This e-mail originated outside the University of Southampton.
</div>
</div>
<div>
<div dir="ltr">Morning all,
<div><br>
</div>
<div>Don, John and David; thank you so much for setting me on the right path. I had zero chance of sorting this out without your help. Especially since I forgot that the console existed in Chrome...</div>
<div><br>
</div>
<div>I read this blog post that explains my repo-woes:</div>
<div><br>
</div>
<blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px">
<div><a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fblog.chromium.org%2F2020%2F02%2Fprotecting-users-from-insecure.html&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C86dd3cb5fe7c4c35ff7208d8b15cd2a7%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637454359518636736%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=cMIrqYSnjtv%2FJYF%2Fcs%2BHWg3at9Kop17TxTk6152R7LQ%3D&reserved=0" originalSrc="https://blog.chromium.org/2020/02/protecting-users-from-insecure.html" shash="MQ0xiSYU56kQg/xn8uLZVuDBlt1eRS+JCX0H46tETILjwoDNRVuEH6o0ACDL4uCbvkTuaopR//313r8BpkhOlrtdb4rKFEFwyqgwRrtmAFUMxLFcUyq05X6nQ+LAchw5BaPsOxSTWYudmtjszQe8IUYJAVKQqB6TTTmmV6gYQPE=" target="_blank">https://blog.chromium.org/2020/02/protecting-users-from-insecure.html</a></div>
</blockquote>
<div><br>
</div>
<div>I found this "solution" that appears to work on the repository side of things:</div>
<div><br>
</div>
<blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px">
<div><a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fstackoverflow.com%2Fquestions%2F32650396%2Fmixed-content-insecure-content-ssl&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C86dd3cb5fe7c4c35ff7208d8b15cd2a7%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637454359518646692%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=mGH5fAfkVaitpUF5hs%2FdZ6MelC3oqEYQh3Sq9V%2BHdU8%3D&reserved=0" originalSrc="https://stackoverflow.com/questions/32650396/mixed-content-insecure-content-ssl" shash="dMYj8fZdIySKOd3CVOT0u3fnQb1Sjq33eT6E2svr9c+nlN1DwXZClqGiVyUmeJ0vTlr7nbPqWu2o23e3tEFhQbs7vV+xlpOGV3anE8C8oskoTyujZqfnZBw9W8qmzMYlCLpsKUvLeSJ/gcjJzBj5d4M/71ooOXNa5+PknD33+yk=" target="_blank">https://stackoverflow.com/questions/32650396/mixed-content-insecure-content-ssl</a></div>
</blockquote>
<div><br>
</div>
<div>I've so far opted for the addition of the meta tag in ../cfg/templates/default.xml:</div>
<div><br>
</div>
<blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px">
<div>meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests"</div>
</blockquote>
<div><br>
</div>
<div>I appreciate this isn't the BEST solution, but it's the most immediate one that gets some people off my back until I can implement a proper one. It does not solve the issue of accessing the file via Elements, which is what I expected.</div>
<div><br>
</div>
<div>It was one of my predecessors or CSD that set up HTTPS in our repository and it hasn't been done in the standard "EPrints way". I thought it worked well by redirecting people to HTTPS. I had previously tried replicating this set-up in our data repository,
but I'm glad I didn't now. The data repo doesn't go to https until logging in and it often generates emails from users along the lines of "your website isn't secure!".</div>
<div><br>
</div>
<div>Anyway, thank you once more for the help and advice. I will update you all on how I get on.</div>
<div><br>
</div>
<div>Thanks,</div>
<div>James</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Mon, Jan 4, 2021 at 10:25 PM David R Newman <<a href="mailto:drn@ecs.soton.ac.uk" target="_blank">drn@ecs.soton.ac.uk</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<p>Hi John,</p>
<p>I have just tested you config change but it does not seem to work on the abstract page of the repository I have been testing on. My recommendation would be to set the following config option at the end of
<a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2F10_core.pl%2F&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C86dd3cb5fe7c4c35ff7208d8b15cd2a7%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637454359518646692%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=R4ft62KY5s2lzY9sZJy78yD95EzODn81cjwdu%2BmCSck%3D&reserved=0" originalSrc="http://10_core.pl/" shash="XDbi+VzPYcNjnREgX/ZlKTET9Hml8Fz1pRwO32Mb7pxPYqSvs88Zgqfyl9zUYCyNXQQXez1Z9bPU8kSIO6GW7v8hETABPK5+btx/sY/RnV7/FMzOLrcZ1iPGC1JT6mCAbYSzb9FnHJdlz9WRzd126UTnHBNodZcy4QcAnbAKY2A=" target="_blank">
10_core.pl</a> to make the URLs protocol-relative:</p>
<p>$c->{http_url} = '//' . $c->{host} . '/';</p>
<p>$c->{http_cgiurl} = '//' . $c->{host} . '/cgi/';</p>
<p>This sets a protocol relative URL rather than an http one. You could alternativerly set to 'https://' . $c->{host} . '/'; to just make all URLs https. If you only set to the protocol-relative option then there is a minor issue that the EPrint::View page
for live items with be display the URL as //HOSTNAME/12345/ rather than <a href="https://HOSTNAME/12345/" target="_blank">
https://HOSTNAME/12345/</a> which may be confusing to some users as they would expect it to start http or https. Also default abstract/summary pages will display the URI as protocol-relative at the end of the summary table. These are issues I have been trying
to address for adding robust protocol-relative URL support to EPrints 3.4.3.<br>
</p>
<p>The motivation to switch to procotol-relative URLs is that it saves a wholesale switch from http to https URLs with redirects that I have noted often causes a dip in Google-indexing and download stats for up to a month or so. An explanation about why this
happens can be found at:</p>
<p><a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.eprints.org%2Fw%2FSimplified_HTTPS_Configuration%23Issues_and_Troubleshooting&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C86dd3cb5fe7c4c35ff7208d8b15cd2a7%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637454359518646692%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=NRIFXeZEQW1F4YuLmFJM%2FTuOnHteg%2F%2FDIzreeGXO52g%3D&reserved=0" originalSrc="https://wiki.eprints.org/w/Simplified_HTTPS_Configuration#Issues_and_Troubleshooting" shash="xu3QfcNJezN1yNU/2VxCq0Mj5vYqVRhulU60TJc1I31/iDZJDI5eVtUN0503x2tyKe7VeTbxJUYevoZmqjNXcvESkCmHWI7KB51EDlArPafmpkt9SvirZHOw8m3af+/tuNcS/p7YW9yPjCqgxAoWeM/+rz/X2L2lkDnpMqi0r34=" target="_blank">https://wiki.eprints.org/w/Simplified_HTTPS_Configuration#Issues_and_Troubleshooting</a>
<br>
</p>
<p>I don't think using https in the http_url configuration option will affect the download stats that much, as it won't lead to and http to https redirect that is the predominant factor in lowering download stats. It will however, change the URIs for eprint
items, which may have an affect on Google indexing. However, this is very much dependent on how Google seeks out the URLs to be indexed, which is multivarious.</p>
<p>Regards</p>
<p>David Newman<br>
</p>
<div>On 04/01/2021 18:02, John Salter wrote:<br>
</div>
<blockquote type="cite">
<div style="padding-bottom:10px;padding-top:5px">
<div style="padding:12px;border:1px solid rgb(141,57,112);background-color:rgb(247,249,250);color:rgb(141,57,112);font-size:14px;line-height:22px;font-family:Calibri,Arial,Helvetica,sans-serif">
<strong>CAUTION:</strong> This e-mail originated outside the University of Southampton.
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">I've just re-checked my config files.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">For 3.3.x, if you include (in e.g.
<a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2F10_core.pl%2F&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C86dd3cb5fe7c4c35ff7208d8b15cd2a7%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637454359518656649%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=vvjs9Ak7ekiudg01THkGPIHtM7D%2FP2GQBvzC9JIIAvY%3D&reserved=0" originalSrc="http://10_core.pl/" shash="WRSd2Vup6sqPumZDknh9v7YLQVDfrcUuYqNS5n3LwND/vwapP3W45GqFjjEjRZdAzcZiSnOXXe3XjvjGPBPab3LmJbrAmyopoqPGqnWjS9feqezBJKDdK8hBiC7UxFLHWQT04S7s44u79gGfAlpCMtDVZkVtUR59wSGbYlKtrQI=" target="_blank">
10_core.pl</a>):<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"> $c->{http_root} = undef;<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">It will make thumbnails/download links relative rather than absolute.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">I think there was more to it that that though - if you're creating downloadable content (e.g. coversheets) , you want it to render the full links (using with
https by defult).<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Cheers,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">John<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<div>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(225,225,225);padding:3pt 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:11pt;font-family:Calibri,sans-serif" lang="EN-US">From:</span></b><span style="font-size:11pt;font-family:Calibri,sans-serif" lang="EN-US">
<a href="mailto:eprints-tech-bounces@ecs.soton.ac.uk" target="_blank">eprints-tech-bounces@ecs.soton.ac.uk</a> [<a href="mailto:eprints-tech-bounces@ecs.soton.ac.uk" target="_blank">mailto:eprints-tech-bounces@ecs.soton.ac.uk</a>]
<b>On Behalf Of </b>David R Newman via Eprints-tech<br>
<b>Sent:</b> 04 January 2021 17:44<br>
<b>To:</b> John Salter <a href="mailto:J.Salter@leeds.ac.uk" target="_blank"><J.Salter@leeds.ac.uk></a>;
<a href="mailto:eprints-tech@ecs.soton.ac.uk" target="_blank">eprints-tech@ecs.soton.ac.uk</a>; James Kerwin
<a href="mailto:jkerwin2101@gmail.com" target="_blank"><jkerwin2101@gmail.com></a><br>
<b>Subject:</b> Re: [EP-tech] Word Documents won't download<u></u><u></u></span></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<p>Hi all,<u></u><u></u></p>
<p>So, the problem is the URL generated by EPrints compiled XML's cite:linkhere which uses http rather than https. The suggestion John's makes about
<a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.eprints.org%2Fw%2FSimplified_HTTPS_Configuration%23HTTPS_Only&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C86dd3cb5fe7c4c35ff7208d8b15cd2a7%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637454359518656649%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=XmNIhnGM75llPQnfIGLTNtxG%2FrnVfrPUS1Ri2tcuo6U%3D&reserved=0" originalSrc="https://wiki.eprints.org/w/Simplified_HTTPS_Configuration#HTTPS_Only" shash="fC6QEPD8alGGs+R8fcuiCCLH4Vrql96gp2fvCiLbVk+hvnMT/LCiGrxVFHCbENxofUwzjvJ8UNcNyQLEoDd1vDfmYJdSBd0RcFSnPAk0wfobFBIHFKpNgJr8lP+YY6jbLjdE3IALUT0VuTB+gBYwwwTblKRCFtaP7kEgTkdnNxE=" target="_blank">
https://wiki.eprints.org/w/Simplified_HTTPS_Configuration#HTTPS_Only</a> will only work if you are running EPrints 3.4.1+, which I can see that you are not.
<u></u><u></u></p>
<p>One of the features I have been working on for 3.4.3 is protocol relative URLs which should help deal with these issues. If you are still running 3.3.x fixing these sort of problems with be tricky. I think you need to look at the various document citations
and possible <a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Feprint_render.pl%2F&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C86dd3cb5fe7c4c35ff7208d8b15cd2a7%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637454359518666597%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=6f0NR9UT4SAmLriW6bRqIlOCJWmf4xrCDvunUfgxnOU%3D&reserved=0" originalSrc="http://eprint_render.pl/" shash="unWihuAvpQ4F1UlXB7vxj2hnZsKz06nalxD442Pd7lYPSrLkL7HkCDTasL0lufM0+VAmEDa3NBcYGa+LzERngxPqWx3DhjLxZxgorw2KdCYopLg+zcmC2L1uJ6Pa/CTMZzH1AC4quZDmY/pLZzckbMvnhq0Vw3XPH5W23RNgKfE=" target="_blank">
eprint_render.pl</a> and replace the http URLs with https URLs. In some cases the http URL will come from the <cite:linkshere>, which you will probably need to hack with a fix like:<u></u><u></u></p>
<p><a href="{$config{https_url}}/{eprintid}/{pos}/{main}"> <u></u><u></u></p>
<p>and </cite:linkhere> with </a><u></u><u></u></p>
<p>Hope this helps<u></u><u></u></p>
<p>David Newman<u></u><u></u></p>
<div>
<p class="MsoNormal">On 04/01/2021 17:20, John Salter wrote:<u></u><u></u></p>
</div>
<blockquote style="margin-top:5pt;margin-bottom:5pt">
<div>
<div style="border:1pt solid rgb(141,57,112);padding:9pt">
<p class="MsoNormal" style="line-height:16.5pt;background:rgb(247,249,250)"><strong><span style="font-size:10.5pt;font-family:Calibri,sans-serif;color:rgb(141,57,112)">CAUTION:</span></strong><span style="font-size:10.5pt;font-family:Calibri,sans-serif;color:rgb(141,57,112)">
This e-mail originated outside the University of Southampton. <u></u><u></u></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">> I was just about to chime in that the document URL is rendered with http - but you're redirecting to https - so some part of Chrome's 302 handing is possibly
confusing things…</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">To flesh that out a bit more:</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">White Rose is currently still available over http and https. Document links are relative - so match the protocol you're visiting the site from.</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">For LivRepo, it looks like you're using an HSTS setup so requests to http:// are redirected to https:// (via a 307 response).</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">If you update the download URL to use https (via Chrome Console / Inspect), it downloads fine.</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">To fix this in EPrints,
<a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.eprints.org%2Fw%2FSimplified_HTTPS_Configuration%23HTTPS_Only&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C86dd3cb5fe7c4c35ff7208d8b15cd2a7%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637454359518666597%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=2dhxtDlnM2d%2FkwNewYUqDN44Mr9BKwgctl0GMQ%2F5X9A%3D&reserved=0" originalSrc="https://wiki.eprints.org/w/Simplified_HTTPS_Configuration#HTTPS_Only" shash="XgbBMsZSmW0V1aQEaCArc14sIm4p3XQwJy11kXxOt9V3WOJ7uZxVckc+jcFMAowLOOws6gb82haeJduBlQtA91zWBlQ8t5PneqFwwZXLyQ6aTBdnBFMa5lW7Fqs1cjOBo9P6RVA8zMdDqr6tXCycQ7iQb/E+zhyj/YGa6QJODwU=" target="_blank">
https://wiki.eprints.org/w/Simplified_HTTPS_Configuration#HTTPS_Only</a> - setting 'host' to undef is the key - although test this thoroughly first - can't remember if there's any related 'fun' with Symplectic connector if you do this (I don't think there is…).</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Cheers,</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">John</span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"> </span><u></u><u></u></p>
<div>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(225,225,225);padding:3pt 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:11pt;font-family:Calibri,sans-serif" lang="EN-US">From:</span></b><span style="font-size:11pt;font-family:Calibri,sans-serif" lang="EN-US">
<a href="mailto:eprints-tech-bounces@ecs.soton.ac.uk" target="_blank">eprints-tech-bounces@ecs.soton.ac.uk</a> [<a href="mailto:eprints-tech-bounces@ecs.soton.ac.uk" target="_blank">mailto:eprints-tech-bounces@ecs.soton.ac.uk</a>]
<b>On Behalf Of </b>David R Newman via Eprints-tech<br>
<b>Sent:</b> 04 January 2021 17:02<br>
<b>To:</b> James Kerwin <a href="mailto:jkerwin2101@gmail.com" target="_blank"><jkerwin2101@gmail.com></a><br>
<b>Cc:</b> <a href="mailto:eprints-tech@ecs.soton.ac.uk" target="_blank">eprints-tech@ecs.soton.ac.uk</a><br>
<b>Subject:</b> Re: [EP-tech] Word Documents won't download</span><u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<p>Hi James,<u></u><u></u></p>
<p>You should note that the whiterose URL is http rather than https. I have tested (on Chrome) the same URL I was testing before but with http rather than https and this worked just fine. This is starting to suggest to me some security feature (albeit maybe
a bit broken) within Chrome. From the depths of my brain I am vaguely recall some issue to do with content length mismatches that exhibited similar symptoms.<u></u><u></u></p>
<p>Regards<u></u><u></u></p>
<p>David Newman<u></u><u></u></p>
<div>
<p class="MsoNormal">On 04/01/2021 16:53, James Kerwin wrote:<u></u><u></u></p>
</div>
<blockquote style="margin-top:5pt;margin-bottom:5pt">
<div>
<div style="border:1pt solid rgb(141,57,112);padding:9pt">
<p class="MsoNormal" style="line-height:16.5pt;background:rgb(247,249,250)"><strong><span style="font-size:10.5pt;font-family:Calibri,sans-serif;color:rgb(141,57,112)">CAUTION:</span></strong><span style="font-size:10.5pt;font-family:Calibri,sans-serif;color:rgb(141,57,112)">
This e-mail originated outside the University of Southampton. </span><u></u><u></u></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal">Hi David, <u></u><u></u></p>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Thanks for your response. it's good to know it's not just me (although I did ask my family to also attempt to download it and they all struggled).<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">To add to the confusion, this item on the White Rose repository downloads fine. Unless Mr Salter has some different setup, I'm afraid it only adds to my quiet terror:<br>
<br>
<a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Feprints.whiterose.ac.uk%2F160018%2F&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C86dd3cb5fe7c4c35ff7208d8b15cd2a7%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637454359518676565%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=C%2BrVfzwmzf2VJkUs%2FU14ykQR%2FjjR9xkbT04jrC4ukSU%3D&reserved=0" originalSrc="http://eprints.whiterose.ac.uk/160018/" shash="zNLvOixJHFprTQGE16XifNQVfSW74rZbw1E8XLBxgST6YeELSj1mElO8rj3R8kZdVX+C86bQtmajyr0YEjV0kP/2yrWtYkh6kUC1yFLOHA2lVQP0dIx20x/xiGNSVOWC9NIASriqSnL4OPV0PsNRfd8X1k9kcMXLCG2rMQj4WfE=" target="_blank">http://eprints.whiterose.ac.uk/160018/</a><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">What I have noticed is that his filenames in the word documents have no spaces. I'm currently mooching through our EPrints database for a doc(x) file that also avoids spaces. This isn't the most scientific way to work it out, but I'm hoping
it yields some results...<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">This sort of problem landing at my feet on the first day back at work should be considered some sort of abuse of my human rights!<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">If by some miracle I find a cause or solution I will share it.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Thanks,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">James<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<div>
<p class="MsoNormal">On Mon, Jan 4, 2021 at 4:45 PM David R Newman <<a href="mailto:drn@ecs.soton.ac.uk" target="_blank">drn@ecs.soton.ac.uk</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin:5pt 0cm 5pt 4.8pt">
<div>
<p>Hi James,<u></u><u></u></p>
<p>I see the same behaviour on your repository for the Word document on the URL you provided. Similarly it works fine on FireFox but has problems on Chrome when you click on the link and don't try to download it another tab. Oddly, if I try a second time
I get a popup asking me if I want to allow downloads of multiple files. I have tested on a different repository and I see the same issue with both .doc and .docx files. I suspect there may be issues with all application/... mime type files. My best guess
is this is a new security feature from Chrome. It may be something that requires tweaking Apache's configuration or possibly even something within EPrints.<u></u><u></u></p>
<p>I have also tested on Edge and Opera (all browsers running on Windows 10) and I do not have any issues either. The Chrome version I am running is 87.0.4280.88, this looks to have been released at the beginning of December. I do not know when my browser
upgraded but there are currently no knew updates available for Chrome according to my browser's "About Google Chrome" page. I will continue to investigate and get back to the list if I find out anything more.<u></u><u></u></p>
<p>Regards<u></u><u></u></p>
<p>David Newman<u></u><u></u></p>
<div>
<p class="MsoNormal">On 04/01/2021 15:54, James Kerwin via Eprints-tech wrote:<u></u><u></u></p>
</div>
<blockquote style="margin-top:5pt;margin-bottom:5pt">
<div>
<div style="border:1pt solid rgb(141,57,112);padding:9pt">
<p class="MsoNormal" style="line-height:16.5pt;background:rgb(247,249,250)"><strong><span style="font-size:10.5pt;font-family:Calibri,sans-serif;color:rgb(141,57,112)">CAUTION:</span></strong><span style="font-size:10.5pt;font-family:Calibri,sans-serif;color:rgb(141,57,112)">
This e-mail originated outside the University of Southampton. </span><u></u><u></u></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal">Hi All,<u></u><u></u></p>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Happy new year etc. Hope everyone is well.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">I have a problem that has appeared today and it was fine before 18/12/2020 (as in it worked as expected).<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Word documents are not downloading on the repository when using Chrome. If I right the download link and open it in a new tab it works and the file is downloaded. PDFs are behaving fine. If I use FireFox and click the download link the
file will download, but it does prompt me whether I want to save or open (this is fine, I don't use FF much so I won't click the "don't ask again" option).<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">In Elements on both Chrome and FF the file will not download. PDFs are downloading through Elements fine.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Is there a likely cause for this? Some sort of update to some obscure working of the internet?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Example record:<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flivrepository.liverpool.ac.uk%2F3033942%2F&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C86dd3cb5fe7c4c35ff7208d8b15cd2a7%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637454359518676565%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=FkPO5UaJssYzESQpbrLrlyRzSnh%2BvxuytHzr7RkhCw8%3D&reserved=0" originalSrc="https://livrepository.liverpool.ac.uk/3033942/" shash="vOSwcpO8gRy1ZxxUxP9q7h4pPJxcmR4gRdz6kn+L/lVGL+nSrB/hzNiO2nmxoyN0eE0m4DtqwElzaEio09EY+8p992G4cB5hGwRGaAq8xrtU/h5CgeiHQ9Y89dLTaIX3nmsCZ1VWEa00s6eQkN17aC690D4BwQG9aX4+pczRSFY=" target="_blank">https://livrepository.liverpool.ac.uk/3033942/</a><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Any help will be gratefully received. I'm totally confused by it and don't know where to start.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Thanks,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">James<u></u><u></u></p>
</div>
</div>
</div>
<p class="MsoNormal"><br>
<br>
<br>
<u></u><u></u></p>
<pre>*** Options: <a href="http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech" target="_blank">http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech</a><u></u><u></u></pre>
<pre>*** Archive: <a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C86dd3cb5fe7c4c35ff7208d8b15cd2a7%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637454359518686517%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=JGcdRqZJeEDqz%2Bpw7AzHBc2CEZe3SLm7KVSCYffvdfY%3D&reserved=0" originalSrc="http://www.eprints.org/tech.php/" shash="FofCbGu2afTog2JWsbm1gp7IibhSCFXDzDOPUNWj9BNoRUlcNpqFl0UoFGSw8pk3p1EZeGBucvSxbVtDVsZTe15Oyh7b5XqwgwMa+nZ+w1y7D9684VT5tekYFh2GVfSrS0ZGGs6+niVqriQNktGA1MTfAMcTIBeRUiq2PHu7n5k=" target="_blank">http://www.eprints.org/tech.php/</a><u></u><u></u></pre>
<pre>*** EPrints community wiki: <a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C86dd3cb5fe7c4c35ff7208d8b15cd2a7%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637454359518686517%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=eAtYW5%2BkYaMfTXm1QQDBVw1wmWAPNFRRbEKmZerfr%2BM%3D&reserved=0" originalSrc="http://wiki.eprints.org/" shash="UIjCmViwEPKPXGFzczjmeEtYioS+fKtxcAMIohA4h8Dl6vVBR5nH5+FmsuUHeWSD+7EWgPrxAnmbFmjsejoACmUud3QL+KfN4RTCgyMLZhay5wxWX7lFq5QG1wgLGWeNlhrCmx7RR4zCTc/vr8qheFtmSGtwny6wJBmQweuLNwk=" target="_blank">http://wiki.eprints.org/</a><u></u><u></u></pre>
</blockquote>
<div id="gmail-m_-7559243457321975758gmail-m_4893119165545413886gmail-m_1170366041298124642DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2">
<p class="MsoNormal"> <u></u><u></u></p>
<table style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(211,212,222)" cellpadding="0" border="1">
<tbody>
<tr>
<td style="width:41.25pt;border:none;padding:9.75pt 0.75pt 0.75pt" width="58">
<p class="MsoNormal"><a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.avg.com%2Femail-signature%3Futm_medium%3Demail%26utm_source%3Dlink%26utm_campaign%3Dsig-email%26utm_content%3Demailclient&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C86dd3cb5fe7c4c35ff7208d8b15cd2a7%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637454359518686517%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=xariHNE8NJUWXjDWYngb%2BD9Av8PNed%2FVh7JzHcyHbOo%3D&reserved=0" originalSrc="http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient" shash="bfmovjU7YT24qBAdBMcff3ls6VCEvzJFq4pCdQT34MtJRRXVfzP/NywuArVpGGbsvik1q2uvn88oG4C+UPYmBJj7RqybOdAJ9Z9V6Io4C0FK6evkAbpQJkb5fSiXxm6QccWGBL/4jN8vjrUWUuJ6No+he7Am4fESEBHUJkASGng=" target="_blank"><span style="border:1pt solid windowtext;padding:0cm;text-decoration:none"><img id="gmail-m_-7559243457321975758gmail-m_4893119165545413886_x0000_i1025" src="cid:176d1c5364c4ce8e91" alt="Image removed by sender." width="46" height="29" border="0"></span></a><u></u><u></u></p>
</td>
<td style="width:352.5pt;border:none;padding:9pt 0.75pt 0.75pt" width="473">
<p class="MsoNormal" style="line-height:13.5pt"><span style="font-size:10pt;font-family:Arial,sans-serif;color:rgb(65,66,78)">Virus-free.
<a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.avg.com%2Femail-signature%3Futm_medium%3Demail%26utm_source%3Dlink%26utm_campaign%3Dsig-email%26utm_content%3Demailclient&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C86dd3cb5fe7c4c35ff7208d8b15cd2a7%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637454359518696472%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=%2BpaUhhUtb4um1HCgglMYinxcvnOaJR04UjFkg2kzEgg%3D&reserved=0" originalSrc="http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient" shash="c069WNNR/wdHUPdYaJp1mwfK6yDeHvgyGVZOdj0la60t1eUoK7j4FGgrTamh7zrzujGTh6Ke9jkVsHw1ZZiUTjyRzkZe5HnstB8FOpQxhUdQGBt9x080zzjMgrOhAWGWlF3exvJwywB7Z8fozLYGRWiSr37witivaRAUt4DTHSI=" target="_blank">
<span style="color:rgb(68,83,234)">www.avg.com</span></a> </span><u></u><u></u></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
</blockquote>
</div>
</div>
</blockquote>
</div>
</blockquote>
</div>
</div>
</blockquote>
</div>
</blockquote>
</div>
</div>
</div>
*** Options: <a href="http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech" rel="noreferrer" target="_blank">
http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech</a><br>
*** Archive: <a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C86dd3cb5fe7c4c35ff7208d8b15cd2a7%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637454359518696472%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=f%2F65AEeGmWJgrUTqEVC0UhpaGJg17M3U7Wy1Bj85oy0%3D&reserved=0" originalSrc="http://www.eprints.org/tech.php/" shash="R+QXMNaYu/5/8I+kgfI0By9UbgNfQGSJp/6bkT1L3Tuh3qp0aIbMIodVjbL4Hmo99aJ1kW/a/TziUchQKzcWCcxBsCZwBoF89EQrmmCYidW59TUXNGpVCz7PHZQTmyU5OdF6m1gdwLNRAvpoyvPBzIA55fGc2b+JfcYvxcuhnBs=" rel="noreferrer" target="_blank">
http://www.eprints.org/tech.php/</a><br>
*** EPrints community wiki: <a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C86dd3cb5fe7c4c35ff7208d8b15cd2a7%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637454359518706429%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=gFT1NZcT%2FUWVP8AGOfPm6zqYYFZ0eE0voMe2oA6XXbI%3D&reserved=0" originalSrc="http://wiki.eprints.org/" shash="rfH+pIbXcxC2Wk5rUk24F8N6aVRZylHYmbnePW3xDW3bZs6iYO0YqdjfiiFZnTMFM/GY0QK1H5pDnmZ45KVbDhqoj2LXUEJbmP5dwF5c3R175NhLIFi92kLyL9I3qLehuIoTZFZVbH+ugUEWahnn3yonT7PsGF0QZgFIcqLO6F8=" rel="noreferrer" target="_blank">
http://wiki.eprints.org/</a></blockquote>
</div>
</div>
</body>
</html>