ATOM + SSL

[Leeroy Jenkins]

Hello AtoM Community!

I need to configure ssl for the atom

The apache environment is already configured

Do I need to configure something on the AtoM?

Thanks in advance

[Dan Gillean]

Hi Leeroy, 

I think we might need more information to be able to provide any suggestions. To configure your site to use SSL, you will need an SSL certificate from a Certificate Authority. There are paid Authorities, and there is also Let's Encrypt, which is a free, automated, and open Certificate Authority. Once you have the cert(s), you will need to make some modifications to your web server - but it sounds like perhaps you have already done this?

This thread in the user forum from last week has some suggestions on setting up with Let's Encrypt, and troubleshooting webserver configuration - however, the thread relates primarily to Nginx as the webserver, not Apache, so you will likely have to make modifications. We at Artefactual do not test or develop using Apache as the webserver, so we will be unable to provide guidance on this particular matter. 

If you've gotten everything working from a webserver and certificate point of view, then there may not be anything else you need to do! I would recommend doublechecking the Base URL settings in AtoM (docs here) to make sure your base URL uses https and not just http. Note as well that, if you are linking to external digital objects (for example, to add an image to your homepage, etc) and the external link is NOT also https, then you may get a mixed content warning on your homepage. 

If you are still having issues, can you please provide more specifics about the nature of the issue, and about your AtoM site? For example: 

• What version of AtoM do you have installed?
• You mentioned using Apache as your webserver. Have you made any other changes from our recommended installation instructions? If yes, please tell us more. 
• Are you using Let's Encrypt, or have you purchased from a Certificate Authority, or otherwise?  
• Were you issued a single cert, or did you have to assemble your certificate from a mix of files (e.g. local and intermediate)?
• Are there any relevant error messages in your webserver's error log? If so, please share them with us. 

Hopefully with more information about your environment and issues you are encountering, we can provide further suggestions. 

Cheers, 

Dan Gillean, MAS, MLIS
AtoM Program Manager
Artefactual Systems, Inc.
604-527-2056

@accesstomemory

--
You received this message because you are subscribed to the Google Groups "AtoM Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ica-atom-user...@googlegroups.com.
To post to this group, send email to ica-ato...@googlegroups.com.
Visit this group at https://groups.google.com/group/ica-atom-users.
To view this discussion on the web visit https://groups.google.com/d/msgid/ica-atom-users/67cfd342-a083-4e2b-8d12-4b9d6429fb40%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Leeroy Jenkins]

Hi Dan,

Thanks for your help

answering your questions

I updated from version 2.4.0 to 2.4.1 according to your tip https://groups.google.com/forum/?utm_medium=email&utm_source=footer#!msg/ica-atom-users/N8qTu9O4oiA/7jLWyz0EBwAJ

it was not necessary. the certificate is on a proxy server

we bought the certificate

Yes, we received a single certificate

I created a new virtualhost in proxy server to test the https connection and the secure connection was made successfully

I did some tests on the system and found no errors

our concern was that it needed to set some parameters inside the atom

Thanks a lot for the help

Lerooy