#1  
Old 2nd August 2012, 23:54
EckyBrazz EckyBrazz is offline
Member
 
Join Date: Jul 2012
Location: Goiânia, Brazil
Posts: 37
Thanks: 3
Thanked 4 Times in 1 Post
Default SSL on port 8080 and 8081

Hi,

When I use https on port 8080 every thing is fine, but when I use https on port 8081 I get

Code:
Secure Connection Failed      
An error occurred during a connection to XXXX.com.br:8081.
SSL received a record that exceeded the maximum permissible length.
(Error code: ssl_error_rx_record_too_long)

  The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
  Please contact the website owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.
__________________
Michael Burgos
www.vecks.com.br
Reply With Quote
Sponsored Links
  #2  
Old 3rd August 2012, 09:11
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,003
Thanks: 825
Thanked 5,376 Times in 4,223 Posts
Default

There is no ssl for port 8081 enabled, so if you access a http vhost by https, you get the error message that you posted above.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 3rd August 2012, 15:38
EckyBrazz EckyBrazz is offline
Member
 
Join Date: Jul 2012
Location: Goiânia, Brazil
Posts: 37
Thanks: 3
Thanked 4 Times in 1 Post
Default

How to enabel ssl on port 8081.

My apps.vhost looks like this

Code:
        listen 8081;

        server_name _;

        root   /var/www/apps;

        client_max_body_size 20M;

        location / {
               index index.php index.html;
        }

        # serve static files directly
        location ~* ^.+.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt)$ {
               access_log        off;
        }

        location ~ \.php$ {
               try_files $uri =404;
               include /etc/nginx/fastcgi_params;
               fastcgi_pass unix:/var/lib/php5-fpm/apps.sock;
               fastcgi_index index.php;
               fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
               fastcgi_param PATH_INFO $fastcgi_script_name;
               fastcgi_buffer_size 128k;
               fastcgi_buffers 256 4k;
               fastcgi_busy_buffers_size 256k;
               fastcgi_temp_file_write_size 256k;
        }

        location ~ /\. {
               deny  all;
        }

        location /phpmyadmin {
               root /usr/share/;
               index index.php index.html index.htm;
               location ~ ^/phpmyadmin/(.+\.php)$ {
                       try_files $uri =404;
                       root /usr/share/;
                       include /etc/nginx/fastcgi_params;
                       # To access phpMyAdmin, the default user (like www-data on Debian/Ubuntu) must be used
                       fastcgi_pass 127.0.0.1:9000;
                       fastcgi_param HTTPS on; # <-- add this line
                       fastcgi_param HTTPS $fastcgi_https; # <-- add this line
                       fastcgi_index index.php;
                       fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                       fastcgi_buffer_size 128k;
                       fastcgi_buffers 256 4k;
                       fastcgi_busy_buffers_size 256k;
                       fastcgi_temp_file_write_size 256k;
                       fastcgi_read_timeout 240;
               }
               location ~* ^/phpmyadmin/(.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt))$ {
                       root /usr/share/;
               }
        }
        location /phpMyAdmin {
               rewrite ^/* /phpmyadmin last;
        }
__________________
Michael Burgos
www.vecks.com.br
Reply With Quote
  #4  
Old 3rd August 2012, 16:29
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,741 Times in 2,575 Posts
Default

Take a look at the ISPConfig vhost and copy over the SSL lines to the apps vhost (that way you will be using the same SSL cert as the ISPConfig interface).
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #5  
Old 3rd August 2012, 18:19
EckyBrazz EckyBrazz is offline
Member
 
Join Date: Jul 2012
Location: Goiânia, Brazil
Posts: 37
Thanks: 3
Thanked 4 Times in 1 Post
Default

Thanks for your reply Falko,

It works, but had to take the lines out again, because the clients don't know that they have to use https now.

Is it possible to configure it that they can choose either http or https ?
__________________
Michael Burgos
www.vecks.com.br

Last edited by EckyBrazz; 3rd August 2012 at 18:34.
Reply With Quote
  #6  
Old 4th August 2012, 10:49
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,741 Times in 2,575 Posts
Default

No, not on the same port.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #7  
Old 7th November 2012, 19:24
Trixor Trixor is offline
Junior Member
 
Join Date: Nov 2012
Posts: 1
Thanks: 0
Thanked 0 Times in 0 Posts
 
Default apps.vhost

Hi,

I am able to make it work by adjusting apps.vhost, but whenever I change
something in the ISPConfig configuration, it overwrite's apps.vhost defaulting it back to a non-ssl connection. How can I configure it in ISPConfig so that it remains ssl, or if that is not possible, what action should I refrain from doing so it does not rewrite apps.vhost.

Thanks,
Trixor

EDIT: And I figured something out that works:
Put this in your Server config -> Web -> Apps-vhost port

8081 ssl; ssl_certificate /usr/local/ispconfig/interface/ssl/ispserver.crt; ssl_certificate_key /usr/local/ispconfig/interface/ssl/ispserver.key

Last edited by Trixor; 7th November 2012 at 19:55.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
server doesn't listen on UDP port 53 kmchen Installation/Configuration 3 10th January 2012 17:13
ISP Blocking port 80 & 8080 grandpagenocide Installation/Configuration 4 18th June 2007 11:48


All times are GMT +2. The time now is 20:37.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.