Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SSL Configuration on Application Server #27

Closed
JJediny opened this issue Aug 10, 2016 · 0 comments
Closed

SSL Configuration on Application Server #27

JJediny opened this issue Aug 10, 2016 · 0 comments

Comments

@JJediny
Copy link
Member

JJediny commented Aug 10, 2016

Has anyone come across scenarios where user login and logouts drops to port 80 (http) even though I've configured my load balancer to only listen to port 443 (https)?

I've followed all the steps here - https://github.com/ckan/ckan/wiki/SSL.

My site starts from https://mysite.com
But when I try to logout/login, it tries to reach http://mysite.com/user/login?came_from=/user/logged_in
After a while, my browser's connection is reset with a grey screen.
I can tell that I'm logged in because i can get to https://mysite.com/dashboard, but only if i enter the url manually after the connection reset

One thing I took note is that my SSL certs are already given at the load balancer level. (we're using AWS)
I"m not sure giving the SSL cert and key again on NGINX config would work.

This whole SSL configuration is new to me, so i'm not sure where to look for answers.
Would really appreciate if anyone have any answers here.

Thanks!


ckan-dev mailing list
ckan-dev@lists.okfn.org
https://lists.okfn.org/mailman/listinfo/ckan-dev
Unsubscribe: https://lists.okfn.org/mailman/options/ckan-dev

to ckan-dev
Turns out you need to add this chunk of code to your apache.wsgi file in /etc/ckan/default/apache.wsgi

environ['wsgi.url_scheme'] = environ.get('HTTP_X_URL_SCHEME', 'https') return _application(environ, start_response)

Now it's redirecting all requests to https

@JJediny JJediny closed this as completed Feb 15, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant