Enforce https on login

[eaquigley]

---

Author Name: Elda Sotiri (@esotiri)
Original Redmine Issue: 3463, https://redmine.hmdc.harvard.edu/issues/3463
Original Date: 2014-01-30
Original Assignee: Philip Durbin

---

This request came from Merce.

can we use https for login in in 4.0? This has been quite critical for some
time ...

---

Redmine related issue(s): 1096

---

[eaquigley]

---

Original Redmine Comment
Author Name: Philip Durbin (@pdurbin)
Original Date: 2014-06-02T20:06:58Z

---

Probably a duplicate of #1096.

[eaquigley]

---

Original Redmine Comment
Author Name: Philip Durbin (@pdurbin)
Original Date: 2014-06-03T13:13:30Z

---

Rejected as duplicate of #1096

[pdurbin]

Re-opening. I don't think we should consider this closed until we have documented in the Installer's Guide how to enforce HTTPS. Currently, we are exploring enforcing HTTPS with Apache using rewrite rules, perhaps like the one seen here:

https://github.com/IQSS/dataverse/blob/c58df11b48e837b09b0cbf071a00181cbf7887cd/conf/httpd/conf.d/dataverse.conf

We also need to decide if we're going to simply enforce HTTPS across the entire site or not. (I believe we decided we'd like to try and see if anything breaks, such as TwoRavens.)

I'm going to re-assign this to @esotiri since she is working on fronting various servers with Apache. We'll document the process.

[eaquigley]

@pdurbin I closed this ticket because of the comment stating "Rejected as duplicate of #1096"

[pdurbin]

@pdurbin I closed this ticket because of the comment stating "Rejected as duplicate of #1096"

Ah, but this was not migrated: https://redmine.hmdc.harvard.edu/issues/1096

One ticket on the GitHub side (i.e. this one) should be sufficient.