Re: WildCard Cert Errors

Thanks, Lazlo.  How should I re-do the cert so I can use:
https://ezproxy.gc.cuny.edu
because all my dbs are set to this form
https://ezproxy.gc.cuny.edu/login?url=https://www.jstor.org/action/showAdvancedSearch



From: Laszlo Gercsov <[email protected]>
Sent: Wednesday, October 2, 2019 7:52 PM
To: Klein, Stephen <[email protected]>; [email protected]
Subject: Re: WildCard Cert Errors

Hi Stephen.

Your wildcard certificate is set up like mine. Your certificate only has :-

Common Name (CN) *.ezproxy.gc.cuny.edu

That means that the certificate will not match https://ezproxy.gc.cuny.edu - you need to use https://login.ezproxy.gc.cuny.edu or http://ezproxy.gc.cuny.edu

Also, the wildcard "*" asterisk part of the certificate will only match one "word" in the URL ie no dots. Ezproxy will rewrite HTTPS urls replacing the dots in the vendor hostname with "-" hyphens.

Your starting point URLs should be either :-
http://ezproxy.gc.cuny.edu/login?url=https://www.jstor.org/action/showAdvancedSearch
or
https://login.ezproxy.gc.cuny.edu/login?url=https://www.jstor.org/action/showAdvancedSearch

Either way, the proxied URL will be rewritten by ezproxy to :-

https://www-jstor-org.ezproxy.gc.cuny.edu/action/showAdvancedSearch

Best,

Laszlo.


________________________________
From: EZproxy List <[email protected]<mailto:[email protected]>> on behalf of Klein, Stephen <[email protected]<mailto:[email protected]>>
Sent: Wednesday, 2 October 2019 10:42 PM
To: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>>
Subject: Re: [EZPROXY-L] WildCard Cert Errors


Meant:

https://www.jstor.org.ezproxy.gc.cuny.edu/action/showAdvancedSearch [protect-au.mimecast.com]<https://urldefense.proofpoint.com/v2/url?u=https-3A__protect-2Dau.mimecast.com_s_KY4PCVARmOH5v6ELFGn-5Fbs-3Fdomain-3Djstor.org.ezproxy.gc.cuny.edu&d=DwMGaQ&c=8v77JlHZOYsReeOxyYXDU39VUUzHxyfBUh7fw_ZfBDA&r=RzuvmrjV2OCbxFATfoSTEnF5WFvuPC_o3B3MUQCetc0&m=z9psyhcaTBDE9et7oKgNMBaYnXyflemEzdEWnGm-nuc&s=Jc9yIDNYlkGQQdDBRJQD95XR6bgb0V5fpVL9mtJIX9A&e=>

causes wildcard errors



From: Klein, Stephen <[email protected]<mailto:[email protected]>>
Sent: Tuesday, October 1, 2019 9:36 PM
To: [email protected]<mailto:[email protected]>
Subject: WildCard Cert Errors



The following URL causes no issues:

https://ezproxy.gc.cuny.edu/login?url=https://www.jstor.org/action/showAdvancedSearch [protect-au.mimecast.com]<https://urldefense.proofpoint.com/v2/url?u=https-3A__protect-2Dau.mimecast.com_s_-2DBMpCWLVn6iPkKQguxORuh-3Fdomain-3Dezproxy.gc.cuny.edu&d=DwMGaQ&c=8v77JlHZOYsReeOxyYXDU39VUUzHxyfBUh7fw_ZfBDA&r=RzuvmrjV2OCbxFATfoSTEnF5WFvuPC_o3B3MUQCetc0&m=z9psyhcaTBDE9et7oKgNMBaYnXyflemEzdEWnGm-nuc&s=NqV-6P-_RAXP3DyVghSggG9nOHxpcSM_5VXFLTPIGZk&e=>

Which allows this Option HttpsHyphens​



This:

https://www-jstor-org.ezproxy.gc.cuny.edu/action/showAdvancedSearch [protect-au.mimecast.com]<https://urldefense.proofpoint.com/v2/url?u=https-3A__protect-2Dau.mimecast.com_s_qjESCXLW6DiqJRgycD6bFI-3Fdomain-3Dwww-2Djstor-2Dorg.ezproxy.gc.cuny.edu&d=DwMGaQ&c=8v77JlHZOYsReeOxyYXDU39VUUzHxyfBUh7fw_ZfBDA&r=RzuvmrjV2OCbxFATfoSTEnF5WFvuPC_o3B3MUQCetc0&m=z9psyhcaTBDE9et7oKgNMBaYnXyflemEzdEWnGm-nuc&s=YbNbpGy7X9C3jeOyikBoYuAslg2ZD4kLOkvcbGnCW8c&e=>

Causes Wildcard errors



Is the second URL allowed if using a WildCard Cert or it will always cause errors?



Thanks,

Stephen Klein

Graduate Center

​

________________________________

To unsubscribe from the EZPROXY-L list, click the following link:
http://listserv.oclclists.org/scripts/wa.exe?SUBED1=EZPROXY-L&A=1 [protect-au.mimecast.com]<https://urldefense.proofpoint.com/v2/url?u=https-3A__protect-2Dau.mimecast.com_s_gZFxCZY146sDGLwVhxdup6-3Fdomain-3Dlistserv.oclclists.org&d=DwMGaQ&c=8v77JlHZOYsReeOxyYXDU39VUUzHxyfBUh7fw_ZfBDA&r=RzuvmrjV2OCbxFATfoSTEnF5WFvuPC_o3B3MUQCetc0&m=z9psyhcaTBDE9et7oKgNMBaYnXyflemEzdEWnGm-nuc&s=53_9n1IszF5pJ4h3zueP7ORwKzOqF8lpQ8Af6O09YJc&e=>

********************************************************************
If you wish to stop receiving messages from EZPROXY-L or otherwise amend your preferences,
you can do so <a href="https://www.oclc.org/forms/internet-subscription.en.html">here</a>.
Or email [email protected] including the relevant text below in the body of the email:
• To unsubscribe: "unsubscribe EZPROXY-L"
• To receive EZPROXY-L in digest form: "set EZPROXY-L digest"
• To set your options to no mail: "set EZPROXY-L nomail"
• To receive these messages in the future "set EZPROXY-L mail"
To contact the list owners directly please send your message to [email protected].
If you unsubscribe from EZPROXY-L, you will no longer be able to participate in any of its features, including the public forum.
To unsubscribe from all OCLC marketing email communications
(including all OCLC listervs, OCLC Connect emails, OCLC event notifications, product/service/cooperative updates and newsletters),
please email us at [email protected].