Bug in support for SSL repositorys?

Open Harvester Systems support questions and answers, bug reports, and development issues.

Moderators: jmacgreg, michael, John

Forum rules
The Public Knowledge Project Support Forum is moving to http://forum.pkp.sfu.ca

This forum will be maintained permanently as an archived historical resource, but all new questions should be added to the new forum. Questions will no longer be monitored on this old forum after March 30, 2015.
Posts: 1
Joined: Thu Oct 22, 2009 2:57 am

Bug in support for SSL repositorys?

Postby heinasen » Thu Oct 22, 2009 3:23 am


I am trying to add an DSpace archive on https://ao.doria.fi. The base URL is https://ao.doria.fi/dspace-oai/request.

However, as I try to add the archive, I get error claiming that my URL is invalid.

I am by no means a web application programmer (rather a C/C++ developer) but I dug a little and here is what I found:

The actual http-request is generated here: lib\pkp\classes\file\wrappers\HTTPFileWrapper.inc --> open(). The problem is that if SSL is used (https) harvester includes the protocol identifier to the request Host-field. And this seems to be wrong and causing servers to respond with "Bad Request, 400". I verified the behaviour also by simple request to www.example.com.

Fix for me was a little hack removing the ssl:// - prefix from the generated request. So final request should have the Host-field like this: "ao.doria.fi". Instead of "ssl://ao.doria.fi", which is causing server to reply "Bad Request".

I am using version 2.3.0.

As I said, I'm no web application developer so I might be doing something silly, but I thought to report this finding anyways :)

Markku Heinäsenaho

Posts: 10015
Joined: Wed Aug 10, 2005 12:56 pm

Re: Bug in support for SSL repositorys?

Postby asmecher » Thu Oct 22, 2009 8:00 am

Hi Markku,

Without the ssl:// prefix, you're not using SSL as a transport for the data -- it'll go through plain HTTP that way. You might try turning off the "allow_url_fopen" in config.inc.php, but in general, it would help to check the repository's log to find out what it's seeing of these requests.

Alec Smecher
Public Knowledge Project Team

Return to “Open Harvester Systems Support and Development”

Who is online

Users browsing this forum: No registered users and 2 guests