Re: [Extern] [dspace-tech] dspace ssl with apache proxy

[Michael Plate]

Hi,

Am 24.05.24 um 23:00 schrieb Nico Lambrechts:

i have installed Dspace 7.6 on a new server.

this will be a production server running ssl, so i have installed apache to proxy. from a network computer, I access https://dspace.domain, the site open with error 500. I access https://dspace.domain/server, the /server/api site open with no problem.

from the server i access http://localhost:4000 and the site open with no problem.

http://localhost:8080/server and the site open with no problem.

my config below:
local.cfg:
dspace.server.url = http://localhost:8080/server
dspace.ui.url = http://localhost:4000

both URLs need to be the external URLs, in your terms

dspace.server.url = https://dspace.domain/server
dspace.ui.url = https://dspace.domain

config.prod.yml:
ui:
   ssl: false
   host: localhost
   port: 4000
   nameSpace: /

rest:
   ssl: false
   host: localhost

^^^^^^^^^^^^ must be the same like "dspace.ui.url" w/o the protocol, just the hostname, means "dspace.domain" .

   port: 8080

port: 443



openssl s_client -connect dspace.domain:443

you should have complete cert chain and verify returns 0.

CU

Michael

--
All messages to this mailing list should adhere to the Code of Conduct: 
https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx

To unsubscribe from this group and stop receiving emails from it, send an email 
to dspace-tech+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/dspace-tech/a875ada1-9080-4d87-b1e4-bb5b243c18da%40bibliothek.uni-kassel.de.

check your apache config and ssl correctness with openssl before going on to dspace: --- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group.

smime.p7s
Description: Kryptografische S/MIME-Signatur