[GeoNetwork-users] Assistance on GeoNetwork over SSL & proxying w/AJAX

Greetings--

I'm in the process of setting up GeoNetwork for the University of
Minnesota Libraries, and have completed the following:

1. Downloaded the source from git and built it locally. (Red Hat
Enterprise Linux 6, the most recent stable source for the app, JDK,
maven, and other components.)
2. Setup Tomcat (port 8080).
3. Obtained an SSL cert and setup Apache w/SSL.

Current status: The app. appears to work fine over 8080 on Tomcat, but
when I setup proxying with Apache, I'm unable to get the AJAX (I
believe) calls to be proxied. I've tried both the mod_jk and mod_proxy
+ mod_proxy_http methodologies:

Using the latter example, I try this in my site's Apache SSL conf:

ProxyRequests Off
ProxyPreserveHost On
<Proxy *>
  Order deny,allow
        Allow from all
</Proxy>

ProxyPass /geonetwork http://localhost:8080/geonetwork
ProxyPassReverse /geonetwork http://localhost:8080/geonetwork
<Location /geonetwork>
    Order allow,deny
    Allow from all
</Location>

The app is indeed served from https:// (port 443), and the map
renders/pans. But I believe that AJAX requests fail, especially with
the map/search buttons and auto-suggest. But when I move these same
directives into Apache's plain HTTP/80 conf file, everything works fine
(including the client-side/AJAX calls).

We're pretty strongly inclined toward using SSL, so I'd appreciate any
suggestions that folks have.

One thing I'd rather avoid -- if at all possible -- is messing with SSL
on Tomcat/8443, unless there's a trivial way to simply reference the
cert/chain/key, as with Apache (where I have much more experience). So
if there are Apache module directives or syntax I'm missing with the
current approach, I'd like to go that way first.

Best Regards,

--
Paul F. Bramscher
brams006@anonymised.com
612-626-2098
University of Minnesota Libraries
PGP Public Key: http://z.umn.edu/brams006pubkey

Apologies -- Appeared to be a problem with an early/test dataset, not
the installation or architecture. Things appear to be working fine.

Regards,

--
Paul F. Bramscher
brams006@anonymised.com
612-626-2098
University of Minnesota Libraries
PGP Public Key: http://z.umn.edu/brams006pubkey

On 03/15/2016 12:27 PM, Paul Bramscher wrote:

Greetings--

I'm in the process of setting up GeoNetwork for the University of
Minnesota Libraries, and have completed the following:

1. Downloaded the source from git and built it locally. (Red Hat
Enterprise Linux 6, the most recent stable source for the app, JDK,
maven, and other components.)
2. Setup Tomcat (port 8080).
3. Obtained an SSL cert and setup Apache w/SSL.

Current status: The app. appears to work fine over 8080 on Tomcat, but
when I setup proxying with Apache, I'm unable to get the AJAX (I
believe) calls to be proxied. I've tried both the mod_jk and mod_proxy
+ mod_proxy_http methodologies:

Using the latter example, I try this in my site's Apache SSL conf:

ProxyRequests Off
ProxyPreserveHost On
<Proxy *>
  Order deny,allow
        Allow from all
</Proxy>

ProxyPass /geonetwork http://localhost:8080/geonetwork
ProxyPassReverse /geonetwork http://localhost:8080/geonetwork
<Location /geonetwork>
    Order allow,deny
    Allow from all
</Location>

The app is indeed served from https:// (port 443), and the map
renders/pans. But I believe that AJAX requests fail, especially with
the map/search buttons and auto-suggest. But when I move these same
directives into Apache's plain HTTP/80 conf file, everything works fine
(including the client-side/AJAX calls).

We're pretty strongly inclined toward using SSL, so I'd appreciate any
suggestions that folks have.

One thing I'd rather avoid -- if at all possible -- is messing with SSL
on Tomcat/8443, unless there's a trivial way to simply reference the
cert/chain/key, as with Apache (where I have much more experience). So
if there are Apache module directives or syntax I'm missing with the
current approach, I'd like to go that way first.

Best Regards,