Test offline https/SSL/TLS NGINX with self-signed cert instead of LetsEncrypt.org ? #2811

Activity

1. holta

   added

   enhancement

   help wanted

   question

   on Jun 3, 2021
2. holta

   added this to the 7.2 milestone on Jun 3, 2021
3. holta commented on Jun 3, 2021

   

   holta

   on Jun 3, 2021

   Last edited by holta

   MemberAuthor

   More actions

   Four relevant tickets at https://github.com/kiwix/kiwix-hotspot :

   • Added HTTPS support for all vhosts (PR 599, merged)
   • Added HTTPS tutorial for SW ZIM (PR 603, merged)
     • Based on: Display tutorial to invite switching to HTTPs for SW based ZIM (546, closed)
   • Hotspot does not read zimit-generated files (608)
4. holta

   modified the milestones: 7.2, 8.0 on Jun 18, 2021
5. tim-moody commented on Jul 28, 2021

   

   tim-moody

   on Jul 28, 2021

   Contributor

   More actions

   I tried the following:

   openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/nginx-selfsigned.key -out /etc/ssl/certs/nginx-selfsigned.crt
   
   nano server.conf after listen 80;
   
   listen 443 ssl;
         ssl_certificate /etc/ssl/certs/nginx-selfsigned.crt;
         ssl_certificate_key /etc/ssl/private/nginx-selfsigned.key;
   
   

   The following on a medium vm were accessible over https:

   • Home
   • Kiwix
   • Module
   • Maps
   • Sugarizer
   • Nextcloud
   • WP
   • Calibre web

   kalite was not accessible via the menu. It is not proxied and probably requires port 80. The problem is js-menu creates a link with the current protocol, so tried https when only http is available.

   👍React with 👍1Reacted by A Holt
6. tim-moody commented on Jul 28, 2021

   

   tim-moody

   on Jul 28, 2021

   Contributor

   More actions

   I'm less sure about the kalite problem as it is not working with http on this vm, so there could be another issue.
7. jvonau commented on Jul 28, 2021

   

   jvonau

   on Jul 28, 2021

   Contributor

   More actions

   kalite runs on port 8008 and never requires port 80, I'll go with the curl script was not used, now this machine has an incomplete kalite install #2863 (comment) due to the kalite role|iiab split of commands needed.
8. tim-moody commented on Jul 28, 2021

   

   tim-moody

   on Jul 28, 2021

   Contributor

   More actions

   I'll go with the curl script was not used, now this machine has an incomplete kalite install

   probably right
9. holta

   modified the milestones: 8.0, 8.1 on Jan 1, 2022
10. holta

    modified the milestones: 8.1, 8.2 on Jan 1, 2023
11. holta

    modified the milestones: 8.2, 8.3 on Jan 1, 2024
12. holta

    modified the milestones: 8.3, 8.4 on Jan 1, 2025