How to add SSL to APACHE in laradock #1316

meereenee · 2017-12-19T14:56:57Z

How to add SSL to APACHE in laradock?

kieuminhcanh · 2018-01-24T11:25:54Z

Hi @ekahrovic
Did you fixed it? any idea?

meereenee · 2018-01-30T15:29:02Z

@canhkieu Sorry for late response...
Yes, I successfully added SSL to apache by adding the following code to apache Dockerfile before the ENTRYPOINT line:

RUN mkdir /etc/apache2/ssl 2> /dev/null

RUN openssl genrsa -out "/etc/apache2/ssl/MY_CERT_NAME.key" 2048 \
    && openssl req -new -key "/etc/apache2/ssl/MY_CERT_NAME.key" -out "/etc/apache2/ssl/MY_CERT_NAME.csr" -subj "/CN=wptest.local/O=LGS/C=UK" \
    && openssl x509 -req -days 365 -in "/etc/apache2/ssl/MY_CERT_NAME.csr" -signkey "/etc/apache2/ssl/MY_CERT_NAME.key" -out "/etc/apache2/ssl/MY_CERT_NAME.crt"

RUN service apache2 restart

Though, Im not sure the last line must be there, I never tested if it work without it.

Also, you need to add following lines to the virtualhost conf:

SSLEngine on
SSLCertificateFile /etc/apache2/ssl/MY_CERT_NAME.crt
SSLCertificateKeyFile /etc/apache2/ssl/MY_CERT_NAME.key

kieuminhcanh · 2018-02-02T08:58:10Z

Thanks, @ekahrovic
We need add below line before.

RUN apk add --no-cache openssl

And then, after build nginx. I got this error

/etc/nginx/ssl/demo1.key: No such file or directory
140523227229068:error:02001002:system library:fopen:No such file or directory:bss_file.c:406:fopen('/etc/nginx/ssl/demo1.key','w')
140523227229068:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:408:

meereenee · 2018-02-02T09:17:45Z

nginx? I thought we were talking about apache.

FabrizioCafolla · 2018-04-25T10:25:56Z

i used this conf
file "apache2/Dockerfile"
before the ENTRYPOINT line

RUN mkdir /etc/apache2/ssl 2> /dev/null
RUN openssl genrsa -out "/etc/apache2/ssl/ssl_site.key" 2048 \
    && openssl req -new -key "/etc/apache2/ssl/ssl_site.key" -out "/etc/apache2/ssl/ssl_site.csr" -subj "/CN=site.com/O=LGS/C=IT" \
    && openssl x509 -req -days 365 -in "/etc/apache2/ssl/ssl_site.csr" -signkey "/etc/apache2/ssl/ssl_site.key" -out "/etc/apache2/ssl/ssl_site.crt"

RUN a2enmod rewrite && a2enmod headers && a2enmod proxy proxy_html proxy_http xml2enc
RUN a2enmod ssl
RUN service apache2 restart

file "apache2/sites/default.apache.conf"

<IfModule mod_ssl.c>
    <VirtualHost _default_:443>
        ServerAdmin webmaster@localhost
        ServerName site.com
        ServerAlias *.site.com
        DocumentRoot /var/www/public

        SSLEngine on
        SSLCertificateFile "/etc/apache2/ssl/ssl_site.crt"
        SSLCertificateKeyFile "/etc/apache2/ssl/ssl_site.key"

        #SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire
        <FilesMatch "\.(cgi|shtml|phtml|php)$">
                SSLOptions +StdEnvVars
        </FilesMatch>

    	<Directory />
    		Options FollowSymLinks
    		AllowOverride None
    	</Directory>

        <Directory /var/www/public>
            Options FollowSymLinks MultiViews
            AllowOverride All
            Order allow,deny
            allow from all
        </Directory>
    </VirtualHost>
</IfModule>

"site.com" is your site, it must also replace it in the docker command.
"ssl_site" if you would change it, you can!

@ekahrovic in the vhosts file you do not need those commands

anchetaWern · 2019-08-15T03:38:04Z

this doesn't seem to work. I'm trying it locally.

stale · 2020-02-07T22:49:05Z

Hi 👋 this issue has been automatically marked as stale 📌 because it has not had recent activity 😴. It will be closed if no further activity occurs. Thank you for your contributions ❤️.

stale · 2020-02-28T23:37:42Z

Hi again 👋 we would like to inform you that this issue has been automatically closed 🔒 because it had not recent activity during the stale period. We really really appreciate your contributions, and looking forward for more in the future 🎈.

elbakh · 2020-06-16T13:19:30Z

@canhkieu Sorry for late response...
Yes, I successfully added SSL to apache by adding the following code to apache Dockerfile before the ENTRYPOINT line:
RUN mkdir /etc/apache2/ssl 2> /dev/null

RUN openssl genrsa -out "/etc/apache2/ssl/MY_CERT_NAME.key" 2048 \
    && openssl req -new -key "/etc/apache2/ssl/MY_CERT_NAME.key" -out "/etc/apache2/ssl/MY_CERT_NAME.csr" -subj "/CN=wptest.local/O=LGS/C=UK" \
    && openssl x509 -req -days 365 -in "/etc/apache2/ssl/MY_CERT_NAME.csr" -signkey "/etc/apache2/ssl/MY_CERT_NAME.key" -out "/etc/apache2/ssl/MY_CERT_NAME.crt"

RUN service apache2 restart
Though, Im not sure the last line must be there, I never tested if it work without it.

Also, you need to add following lines to the virtualhost conf:
SSLEngine on
SSLCertificateFile /etc/apache2/ssl/MY_CERT_NAME.crt
SSLCertificateKeyFile /etc/apache2/ssl/MY_CERT_NAME.key

Thank you for this. Implemented it successfully without the last line

zooneex9 · 2020-07-01T01:59:30Z

Can you pass and example of your final files cause i can't make it work....

@canhkieu Sorry for late response...
Yes, I successfully added SSL to apache by adding the following code to apache Dockerfile before the ENTRYPOINT line:
RUN mkdir /etc/apache2/ssl 2> /dev/null

RUN openssl genrsa -out "/etc/apache2/ssl/MY_CERT_NAME.key" 2048 \
    && openssl req -new -key "/etc/apache2/ssl/MY_CERT_NAME.key" -out "/etc/apache2/ssl/MY_CERT_NAME.csr" -subj "/CN=wptest.local/O=LGS/C=UK" \
    && openssl x509 -req -days 365 -in "/etc/apache2/ssl/MY_CERT_NAME.csr" -signkey "/etc/apache2/ssl/MY_CERT_NAME.key" -out "/etc/apache2/ssl/MY_CERT_NAME.crt"

RUN service apache2 restart
Though, Im not sure the last line must be there, I never tested if it work without it.
Also, you need to add following lines to the virtualhost conf:
SSLEngine on
SSLCertificateFile /etc/apache2/ssl/MY_CERT_NAME.crt
SSLCertificateKeyFile /etc/apache2/ssl/MY_CERT_NAME.key
Thank you for this. Implemented it successfully without the last line

geraintdong · 2020-09-03T06:29:09Z

Can you pass and example of your final files cause i can't make it work....
@canhkieu Sorry for late response...
Yes, I successfully added SSL to apache by adding the following code to apache Dockerfile before the ENTRYPOINT line:
RUN mkdir /etc/apache2/ssl 2> /dev/null

RUN openssl genrsa -out "/etc/apache2/ssl/MY_CERT_NAME.key" 2048 \
    && openssl req -new -key "/etc/apache2/ssl/MY_CERT_NAME.key" -out "/etc/apache2/ssl/MY_CERT_NAME.csr" -subj "/CN=wptest.local/O=LGS/C=UK" \
    && openssl x509 -req -days 365 -in "/etc/apache2/ssl/MY_CERT_NAME.csr" -signkey "/etc/apache2/ssl/MY_CERT_NAME.key" -out "/etc/apache2/ssl/MY_CERT_NAME.crt"

RUN service apache2 restart
Though, Im not sure the last line must be there, I never tested if it work without it.
Also, you need to add following lines to the virtualhost conf:
SSLEngine on
SSLCertificateFile /etc/apache2/ssl/MY_CERT_NAME.crt
SSLCertificateKeyFile /etc/apache2/ssl/MY_CERT_NAME.key
Thank you for this. Implemented it successfully without the last line

it looks like we have an issue with random file creation of openssl
a little fix helps me make it work

# Dockerfile
RUN mkdir /etc/apache2/ssl 2> /dev/null
RUN openssl genrsa -out "/etc/apache2/ssl/ssl_site.key" 2048 \
    && openssl rand -out /root/.rnd -hex 256 \
    && openssl req -new -key "/etc/apache2/ssl/ssl_site.key" -out "/etc/apache2/ssl/ssl_site.csr" -subj "/CN=site.com/O=LGS/C=IT" \
    && openssl x509 -req -days 365 -in "/etc/apache2/ssl/ssl_site.csr" -signkey "/etc/apache2/ssl/ssl_site.key" -out "/etc/apache2/ssl/ssl_site.crt"

RUN a2enmod rewrite && a2enmod headers && a2enmod proxy proxy_html proxy_http xml2enc
RUN a2enmod ssl
RUN service apache2 restart

# virtual host .conf
<VirtualHost *:443>
  ServerName my-domain.com
  DocumentRoot /var/www/laravel/public/
  Options Indexes FollowSymLinks
  
  SSLEngine on
  SSLCertificateFile "/etc/apache2/ssl/ssl_site.crt"
  SSLCertificateKeyFile "/etc/apache2/ssl/ssl_site.key"

  <Directory "/var/www/laravel/public/">
    AllowOverride All
    <IfVersion < 2.4>
      Allow from all
    </IfVersion>
    <IfVersion >= 2.4>
      Require all granted
    </IfVersion>
  </Directory>

</VirtualHost>

ultrono · 2020-09-26T10:44:16Z

@geraintdong Cheers, all working here! 👍

For anyone else here via Google, the code within the Docker file need to come before the line

ENTRYPOINT ["/opt/docker/bin/entrypoint.sh"]

garbinmarcelo · 2021-03-15T18:20:04Z

Has this been adjusted in the new versions of Laradock? I am trying to use SSL with apache2 but without success so far. I would like it to be something like the nginx container.

garbinmarcelo · 2021-03-17T03:30:44Z

Now when using Laradock it is possible to use HTTPS / SSL with the apache2 container (the step by step is in the comments of the merge), happy to have made this contribution 😀🎉

stale bot added the Stale label Feb 7, 2020

stale bot closed this as completed Feb 28, 2020

garbinmarcelo mentioned this issue Mar 16, 2021

Add SSL to APACHE in laradock #2885

Merged

4 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

How to add SSL to APACHE in laradock #1316

How to add SSL to APACHE in laradock #1316

meereenee commented Dec 19, 2017 •

edited

kieuminhcanh commented Jan 24, 2018

meereenee commented Jan 30, 2018 •

edited

kieuminhcanh commented Feb 2, 2018 •

edited

meereenee commented Feb 2, 2018

FabrizioCafolla commented Apr 25, 2018 •

edited

anchetaWern commented Aug 15, 2019

stale bot commented Feb 7, 2020

stale bot commented Feb 28, 2020

elbakh commented Jun 16, 2020

zooneex9 commented Jul 1, 2020

geraintdong commented Sep 3, 2020 •

edited

ultrono commented Sep 26, 2020

garbinmarcelo commented Mar 15, 2021

garbinmarcelo commented Mar 17, 2021

How to add SSL to APACHE in laradock #1316

How to add SSL to APACHE in laradock #1316

Comments

meereenee commented Dec 19, 2017 • edited

kieuminhcanh commented Jan 24, 2018

meereenee commented Jan 30, 2018 • edited

kieuminhcanh commented Feb 2, 2018 • edited

meereenee commented Feb 2, 2018

FabrizioCafolla commented Apr 25, 2018 • edited

anchetaWern commented Aug 15, 2019

stale bot commented Feb 7, 2020

stale bot commented Feb 28, 2020

elbakh commented Jun 16, 2020

zooneex9 commented Jul 1, 2020

geraintdong commented Sep 3, 2020 • edited

ultrono commented Sep 26, 2020

garbinmarcelo commented Mar 15, 2021

garbinmarcelo commented Mar 17, 2021

meereenee commented Dec 19, 2017 •

edited

meereenee commented Jan 30, 2018 •

edited

kieuminhcanh commented Feb 2, 2018 •

edited

FabrizioCafolla commented Apr 25, 2018 •

edited

geraintdong commented Sep 3, 2020 •

edited