REST API HTTPS Configuration

[Charlotte]

Hello,

Im trying to configure HTTPS for Dspace's rest API only but I am not sure how to proceed on. Im using Docker image to test my code changes from the main repository here but was unable to figure out a way to configure https for the api. Any suggestions or advice?

So far I had tried the following:

1. Change local.cfg api url to be https

2. Changed the environement config file to be ssl:true under (dspace > src > main > docker-compose > environment.dev.ts)

None of these allow me to do a CURL to Dspace at https://localhost:8080

Thanks

[Tim Donohue]

Hi Charlotte,

At this time, the Docker scripts available in the DSpace codebase only support development on localhost​.  They are meant simply as examples and a way to demo / try out DSpace -- they cannot be used in any Production like scenarios.  See also the warning in the README for those scripts:

https://github.com/DSpace/DSpace/blob/main/dspace/src/main/docker-compose/README.md

So, unfortunately, there's no easy way to support SSL using those scripts.  You'd need to create your own Docker scripts if you wish to run DSpace in Production on Docker.  You may be able to borrow basic concepts from our scripts. But, at a minimum, you'd likely want to ensure you have an Apache webserver running in a custom container to manage SSL and copy any certs you need into that container.

There may be others on this list that may already have created some more production-ready Docker scripts for DSpace that they can link to as a guide.  If so, hopefully they'll respond to this thread.

Good luck and let us know on this list if you have more questions.

Tim

---

From: dspac...@googlegroups.com <dspac...@googlegroups.com> on behalf of Charlotte <charlo...@data4life-asia.care>
Sent: Tuesday, September 21, 2021 9:10 PM
To: DSpace Technical Support <dspac...@googlegroups.com>
Subject: [dspace-tech] REST API HTTPS Configuration

 

--
All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx
---
You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dspace-tech...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/96940bbc-28b7-4f22-ab91-78f9a026fee4n%40googlegroups.com.