<!--
	Problematic subdomains:

		- ^ ¹
		- www ²

	¹ Cert only matches *.archives-ouvertes.fr
	² Shows another domain


	Fully covered subdomains:

		- (www.)?	(→ hal)
		- api
		- aurehal
		- aurehal-preprod
		- hal
		- hal-\w+ *
		- halshs
		- medihal
		- pastel
		- tel

	* Per-institution domains

-->
<ruleset name="Archives-ouvertes.fr">

	<target host="archives-ouvertes.fr" />
	<target host="*.archives-ouvertes.fr" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^tel\.archives-ouvertes\.fr$" name="^PHPSESSID$" /-->

	<securecookie host="^tel\.archives-ouvertes\.fr$" name=".+" />


	<!--	Redirect keeps path and args:
						-->
	<rule from="^http://(?:www\.)?archives-ouvertes\.fr/+"
		to="https://hal.archives-ouvertes.fr/" />

	<rule from="^http://(api|aurehal|aurehal-preprod|hal|hal-\w+|halshs|pastel|tel)\.archives-ouvertes\.fr/"
		to="https://$1.archives-ouvertes.fr/" />

</ruleset>
