OpenNetAdmin

Track. Automate. Configure.

Home About Features Community Develop
Download this project as a tar.gz file

force_https=1

libergr

28-03-2011 15:28:59

Hello :

I have added the option force_https=1 from Menu?Admin?Manage system config dialogue. Now I can't enter the ONA because the redirection is not working. here is the error:

This webpage is not available.

The webpage at https://rhserver.corp.cubacel.com/ona might be temporarily down or it may have moved permanently to a new web address.

How can i fix this ?

TIA

Liber

Matt

29-03-2011 09:20:12

Without any other changes you would have to use a SQL query to update the value to 0 for the foce_https option in the sys_config table.

I suspect however that you do not have an HTTPS version of your site configured in apache. Depending on how you have your system set up you would require something similar to the following. It defines a virtual host that listens on port 443 with appropriate SSL configurations to a certificate. Then you would include definitions that point it to the /opt/ona/www directory as its root.

The force_https option simply just does a redirect when ONA detects someone using a non https page. This can all be done at the apache level as well but requires that you have set up apache to serve out https pages. You should be able to test all that out prior to using the force_https option.



# names by which this server may be known
ServerName server.example.net

# enable ssl processing
SSLEngine On
SSLProtocol ALL
SSLCipherSuite ALL:+TLSv1:+SSLv3:+SSLv2:+EXP
#SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /etc/apache2/ssl/example.net.crt
SSLCertificateKeyFile /etc/apache2/ssl/example.net.key

# StdEnvVars makes apache pass SSL_SESION_ID (among other things) to php
SSLOptions +StdEnvVars
....
....

libergr

30-03-2011 12:06:43

Thanks a lot Matt.
Liber