[Mayan EDMS: 2451] HTTPS/SSL issue

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

[Mayan EDMS: 2451] HTTPS/SSL issue

Kevin Stewart
I'm currently working on implementing Mayan EDMS to handle documents related to our business. I've currently got the Docker container running on a VM also running Nextcloud. On running the Docker container, I expose port 80 to port 8080 on the host. I am able to connect via HTTP without issue. However, on attempting to connect via HTTPS, I get this error in Firefox: SSL_ERROR_RX_RECORD_TOO_LONG. In another browser on my phone (Samsung Internet) I get: ERR_SSL_PROTOCOL_ERROR.

I am looking for any help, perhaps needing only to generate a new cert. Any feedback is appreciated!

--

---
You received this message because you are subscribed to the Google Groups "Mayan EDMS" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
For more options, visit https://groups.google.com/d/optout.
Reply | Threaded
Open this post in threaded view
|

[Mayan EDMS: 2457] Re: HTTPS/SSL issue

Victor Zele
Hi - I have enabled HTTPS/SSL via Nginx after setup following the advanced deployment guide for Nginx here.

Just modify the mayan Nginx config file as below, edit for your instance and of course obtain a SSL certificate.

Roberto - might want to add this to that page for SSL encryption setup option.

==================================
# Http to Https redirect
server {
    listen 80;
    listen [::]:80;
    server_name mayan.example.com;
    return 301 https://mayan.example.com$request_uri;
}
# Mayan main https web proxy
server {
    server_name mayan.example.com;
    listen              443 ssl;
    ssl_certificate     /etc/pki/tls/certs/example.crt;
    ssl_certificate_key /etc/pki/tls/private/example.key;

# Setup secure ciphers and protocols  (removed TLS 1.0 and 1.1)
    ssl_protocols TLSv1.2;
    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
# Forces client to negotiate encryption based on server settings
    ssl_prefer_server_ciphers on;
    ssl_session_cache shared:SSL:10m;

location /nginx-status {
    stub_status on;
    access_log   off;
    allow 127.0.0.1;
    deny all;
}
    location / {
        include uwsgi_params;
        uwsgi_pass unix:/usr/share/mayan-edms/uwsgi.sock;

        client_max_body_size 30M;  # Increse if your plan to upload bigger documents
        proxy_read_timeout 30s;  # Increase if your document uploads take more than 30 seconds
    }

    location /static {
        alias /usr/share/mayan-edms/mayan/media/static;
        expires 1h;
    }

    location /favicon.ico {
        alias /usr/share/mayan-edms/mayan/media/static/appearance/images/favicon.ico;
        expires 1h;
    }
}



On Thursday, May 10, 2018 at 1:55:35 PM UTC-7, Kevin Stewart wrote:
I'm currently working on implementing Mayan EDMS to handle documents related to our business. I've currently got the Docker container running on a VM also running Nextcloud. On running the Docker container, I expose port 80 to port 8080 on the host. I am able to connect via HTTP without issue. However, on attempting to connect via HTTPS, I get this error in Firefox: SSL_ERROR_RX_RECORD_TOO_LONG. In another browser on my phone (Samsung Internet) I get: ERR_SSL_PROTOCOL_ERROR.

I am looking for any help, perhaps needing only to generate a new cert. Any feedback is appreciated!

CONFIDENTIALITY NOTICE: 

This transmission may contain information which is Vimo, Inc. (DBA Getinsured) confidential and/or legally privileged. The information is intended only for the use of the individual or entity named on this transmission. If you are not the intended recipient, you are hereby notified that any disclosure, copying, or distribution of the contents of this transmission is strictly prohibited. If you have received this transmission in error, please immediately notify me by return e-mail and destroy all copies of the original message.

--

---
You received this message because you are subscribed to the Google Groups "Mayan EDMS" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
For more options, visit https://groups.google.com/d/optout.