Wordpress)

SvenS 2017-03-01 16:06:35 UTC #1

Hi,

I have used the apache redirect rule to rederect everything to HTTPS. In the file

/opt/bitnami/apache2/conf/bitnami/bitnami.conf

I have therefore added:

Redirect "/" "https://my-domain.com/"

like this:

# Default Virtual Host configuration.

<IfVersion < 2.3 >
  NameVirtualHost *:80
  NameVirtualHost *:443
</IfVersion>

<VirtualHost _default_:80>
  ServerName 11.22.333.444
  ServerAlias www.my-domain.com my-domain.com
  Redirect "/" "https://my-domain.com/"
  DocumentRoot "/opt/bitnami/apps/abc/htdocs"
#  RewriteEngine On
#  RewriteCond %{HTTPS} !=on
#  RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [R,L]
  <Directory "/opt/bitnami/apps/abc/htdocs">
    Options Indexes FollowSymLinks
    AllowOverride All
     <IfVersion < 2.3 >
       Order allow,deny
       Allow from all
     </IfVersion>
     <IfVersion >= 2.3 >
       Require all granted
     </IfVersion>
 </Directory>

  # Error Documents
  ErrorDocument 503 /503.html

  # Bitnami applications installed with a prefix URL (default)
  Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf"
</VirtualHost>

Unfortunately now the

http://127.0.0.1:8888/phpmyadmin

does not work anymore. So I have tried this:

like this:

# Default Virtual Host configuration.
    
    <IfVersion < 2.3 >
      NameVirtualHost *:80
      NameVirtualHost *:443
    </IfVersion>
    
    <VirtualHost _default_:80>
      ServerName 11.22.333.444
      ServerAlias www.my-domain.com my-domain.com
      RewriteCond %{HTTP_HOST} !=127.0.0.1
      Redirect "/" "https://my-domain.com/"
      DocumentRoot "/opt/bitnami/apps/abc/htdocs"
      ...

But that didn't help any. What can I do to access phpmyadmin again - if possible without changing the

Redirect "/" "https://my-domain.com/"

rule?
Many thanks.

davidg 2017-03-02 09:34:58 UTC #2

Hello @SvenS,

Take into account that now your content is served using the port 443, so instead of using this command:

 ssh -i [your-private-key].pem  -N -L 8888:127.0.0.1:80 bitnami@YOUR-IP

you should use this one:

ssh -i [your-private-key].pem  -N -L 8888:127.0.0.1:443 bitnami@YOUR-IP

I hope it helps

SvenS 2017-03-02 11:43:17 UTC #3

Hi @davidg

many thanks for your answer. I just change my putty configuration to
L8888 localhost:443 and
L8888 127.0.0.1:443

and connected to my VM with each of them.

Then I tried using

http://127.0.0.1:8888/phpmyadmin

but it still does not work. It gets redirected to

https://my-domain.com/phpmyadmin

and says 404 Not found.

So I guess this was not the answer I need.

Any further help is very welcome.

davidg 2017-03-03 11:40:38 UTC #4

Hi @SvenS,

That Apache logic is applied when accessing to port 80. Could you try accessing https://127.0.0.1:8888/phpmyadmin instead of http://127.0.0.1:8888/phpmyadmin?

Regards

SvenS 2017-03-03 22:59:56 UTC #5

Hi davidg,

thanks very much. That helped. Firefox was moaning that the page would not be correctly configured and therefore would not allow me to use the site. But after adding an exception rule to firefox it would show me the log-in page of phpmyadmin again.

Thank you!

davidg 2017-03-06 09:37:42 UTC #6

Hi @SvenS,

I'm glad you solved the issue. Thanks for letting us know.

Regards

SvenS 2017-03-09 13:41:27 UTC #7

Hi @davidg

sorry but I have to reopen this thread again. Currently I'm having trubble again to visite

https://127.0.0.1:8888/phpmyadmin

The error I get is SSL_ERROR_RX_RECORD_TOO_LONG

I have googled this issue in the last days but I am lost. Could it be that the SSL certificate is wrong? How would I check and repair that? Or is it my bitnami.conf file wrong?

# Default Virtual Host configuration.

<IfVersion < 2.3 >
  NameVirtualHost *:80
  NameVirtualHost *:443
</IfVersion>

<VirtualHost _default_:80>
  ServerName 11.22.333.444
  ServerAlias www.my-domain.com my-domain.com
  Redirect permanent "/" "https://my-domain.com/"
  DocumentRoot "/opt/bitnami/apps/abc/htdocs"
#  RewriteEngine On
#  RewriteCond %{HTTP_HOST} !=127.0.0.1
#  RewriteCond %{HTTPS} !=on
#  RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [R,L]
  <Directory "/opt/bitnami/apps/abc/htdocs">
    Options Indexes FollowSymLinks
    AllowOverride All
    <IfVersion < 2.3 >
      Order allow,deny
      Allow from all
    </IfVersion>
    <IfVersion >= 2.3 >
      Require all granted
    </IfVersion>
  </Directory>

  # Error Documents
  ErrorDocument 503 /503.html

  # Bitnami applications installed with a prefix URL (default)
  Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf"
</VirtualHost>

# Default SSL Virtual Host configuration.

<IfModule !ssl_module>
  LoadModule ssl_module modules/mod_ssl.so
</IfModule>

Listen 443
SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder on
SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !EDH $
SSLPassPhraseDialog  builtin
SSLSessionCache "shmcb:/opt/bitnami/apache2/logs/ssl_scache(512000)"
SSLSessionCacheTimeout  300

<VirtualHost _default_:443>
  DocumentRoot "/opt/bitnami/apps/abc/htdocs"
  SSLEngine on
SSLCertificateFile "/etc/letsencrypt/live/my-domain.com/fullchain.pem"
SSLCertificateKeyFile "/etc/letsencrypt/live/my-domain.com/privkey.pem"
# SSLCertificateChainFile "/opt/bitnami/apache2/conf/1_root_bundle.crt"

  <Directory "/opt/bitnami/apache2/htdocs">
    Options Indexes FollowSymLinks
    AllowOverride All
    <IfVersion < 2.3 >
      Order allow,deny
      Allow from all
    </IfVersion>
    <IfVersion >= 2.3 >
      Require all granted
    </IfVersion>
  </Directory>

  # Error Documents
  ErrorDocument 503 /503.html

  # Bitnami applications installed with a prefix URL (default)
  Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf"
</VirtualHost>

# Bitnami applications that uses virtual host configuration
Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-vhosts.conf"

How and where would I enable an error log that would tell me more about this issue?

Thanks for any further help.

davidg 2017-03-10 12:05:27 UTC #8

Hello @SvenS,

The error occurs in case the port a client is trying to connect to is opened on the server, but there is no certificate configured properly on the server’s side for this port.

Have you applied any change since last time which could produce the issue? Does it only happens when accessing phpmyadmin?

SvenS 2017-03-10 12:54:05 UTC #9

Hi @davidg,

I am not aware of any changes since last time. Maybe I tried to reniew the SSL certificate in the meantime (but I don't know if or what really happend) and I played around with the path to the SSL certificates in the above conf-file.

Yes all the rest of the domain is fine, I just still need to change some of the links on the homepage from http to https to get the green lock without the yellow warning sign. But I don't think this has something to do with this issue.
The problem only occurs with myphpadmin. When connecting to the VM in order to access myphpadmin I think (hope!) now all the settings in my putty are correct. In the event-log it tells me:

2017-03-10 13:41:19    Looking up host "11.22.333.444"
2017-03-10 13:41:19    Connecting to 11.22.333.444 port 22
[...]
2017-03-10 13:41:20    Local port 8888 forwarding to 127.0.0.1:443

That looks good to me.

How can I "look inside" the certificat to see if it is configured correct?

When building a new certificate will I have to add all the alternatives to the certificate?

https://11.22.333.444
https://my-domain.com
https://www.my-domain.com
http://11.22.333.444
http://my-domain.com
http://www.my-domain.com

Many thanks for your help.

SvenS 2017-03-10 15:20:26 UTC #10

Hi @davidg

and in addition to that do I have to add

https://127.0.0.1:8888/

for phpmyadmin into the certificate as well?

SvenS 2017-03-13 11:31:12 UTC #11

@davidg

I did some more research on my issue. I figured out that I can not issue a certificate for localhost or 127.0.0.1 or 127.0.0.1:8888 or localhost or localhost:8888.
It would give me this error:

[...]
2017-03-13 10:16:43,802:DEBUG:certbot.main:Exiting abnormally:
Traceback (most recent call last):
  File "/root/.local/share/letsencrypt/bin/letsencrypt", line 11, in <module>
    sys.exit(main())
  File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/main.py", line 896, in main
    return config.func(config, plugins)
  File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/main.py", line 692, in certonly
    lineage = _get_and_save_cert(le_client, config, domains, certname, lineage)
  File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/main.py", line 87, in _get_and_save_cert
    renewal.renew_cert(config, domains, le_client, lineage)
  File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/renewal.py", line 296, in renew_cert
    new_certr, new_chain, new_key, _ = le_client.obtain_certificate(domains)
  File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/client.py", line 265, in obtain_certificate
    self.config.allow_subset_of_names)
  File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/certbot/auth_handler.py", line 67, in get_authorizations
    domain, self.account.regr.new_authzr_uri)
  File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/acme/client.py", line 228, in request_domain_challenges
    typ=messages.IDENTIFIER_FQDN, value=domain), new_authzr_uri)
  File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/acme/client.py", line 208, in request_challenges
    new_authz)
  File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/acme/client.py", line 686, in post
    return self._post_once(*args, **kwargs)
  File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/acme/client.py", line 699, in _post_once
    return self._check_response(response, content_type=content_type)
  File "/root/.local/share/letsencrypt/local/lib/python2.7/site-packages/acme/client.py", line 586, in _check_response
    raise messages.Error.from_json(jobj)
Error: urn:acme:error:malformed :: The request message was malformed :: DNS name does not have enough labels

after running this command:

./certbot-auto certonly -vvvv --standalone --dry-run --renew-with-new-domains -d www.my-domain.com -d my-domain.com -d localhost

Now I do not have any further idea. Is my bitnami.conf correct (see above)?

Please help.

silvio 2017-03-13 16:00:52 UTC #12

Hi,

Here you can find our updated documentation on how to create a certificate using let's encrypt.

And, answering your question, let's encrypt doesn't allow you to create certificates either for ip addresses or localhost.

Best regards,
Silvio Fernández

Bitnami provides free all-in-one installers, virtual machines and cloud images for popular open source applications. Get them now!