beameio / beame-insta-ssl

HTTP is over. Don’t get left behind. Get free, secure HTTPS tunneling to your machine! Quick start here!
Other
599 stars 41 forks source link

Post-Installation Issues #10

Closed ghost closed 7 years ago

ghost commented 7 years ago

Hi,

I have an Ubuntu 16.04 LTS server running in a Hyper-V VM on my laptop. It’s using Apache to run a Project Management app called ‘Duet’ [1] which I need to provide customers access to so they can manage their accounts & projects I’m doing for them.

The laptop has of course a WiFi & Wired Ethernet connection. These are provided to the Ubuntu VM via a pfSense firewall VM that’s configured to automatically connect the Ubuntu VM to whichever network adapter has connectivity based on weighted Multi-WAN rules. The host OS (Windows 10 Pro) connects to the Ubuntu VM via a dedicated local/private eth1 connection. In this case the Apache server is double-NAT’d, & I have to act as if I won’t have access to port-forwarding since the internet connection might be a public hotspot at any given time.

I have beameio setup & get the following output when I do beame-insta-ssl list: e8vd6sbrckc6rsfj.v1.p.beameio.net

Then I have a CNAME record pointing projects.funkysalamander.com to e8vd6sbrckc6rsfj.v1.p.beameio.net

I get this when I try to connect to http://projects.funkysalamander.com:

The projects.funkysalamander.com page isn’t working projects.funkysalamander.com didn’t send any data. ERR_EMPTY_RESPONSE

And I get this when I try to connect to https://projects.funkysalamander.com:

This site can’t be reached projects.funkysalamander.com unexpectedly closed the connection. Try: Checking the connection Checking the proxy and the firewall Running Windows Network Diagnostics ERR_CONNECTION_CLOSED

I don’t know much about certificates. At one point last year I had a free sslv2 certificate that came with my domain from my registrar, Gandi.net. It was only valid for 1 year & I need to renew it but haven’t got around to it. When I installed it last time, it was a simple process which involved uploading stuff to a cPanel account dashboard that walked me through the whole process. As for what I need to do on my Hyper-V box, I’m at a loss.

I also need to somehow provide ssh access through the internet so the developer of the Duet app can help troubleshoot some stuff. Don’t know if beameio can provide access on port 22 on a temporary basis somehow.

[1] https://duetapp.com/

zglozman commented 7 years ago

Let's take it step by step. If you browser to the beame hostname without your own cname (it will not work it will need an HTTP redirect).

Does it show the app like it should be?

ghost commented 7 years ago

HTTP: The e8vd6sbrckc6rsfj.v1.p.beameio.net page isn’t working e8vd6sbrckc6rsfj.v1.p.beameio.net didn’t send any data. ERR_EMPTY_RESPONSE

HTTPS: This site can’t be reached e8vd6sbrckc6rsfj.v1.p.beameio.net unexpectedly closed the connection. Try: Checking the connection Checking the proxy and the firewall Running Windows Network Diagnostics ERR_CONNECTION_CLOSED

I don't understand what you mean about it needing a http redirect.

zglozman commented 7 years ago

When you start the beame-insta-SSL tunnel what's the output?

ghost commented 7 years ago

I don't think I've got that far. At least I have no script/command running at bootup in rc.local, etc.

I see on the wiki page [1] it says how to do a terminating tunnel [2], but from what I understand I need a non-terminating tunnel. I don't understand what the wiki article is asking me to do to make that happen. As I said before I don't have experience installing what appears to be a necessary certificate in Apache.

If I can get this working, I'll be happy to update the wiki with simple instructions for whoever comes along next.

[1] https://github.com/beameio/beame-insta-ssl/wiki/Beginner%E2%80%99s-Guide-to-Using-beame-insta-ssl

[2] Installing a terminating tunnel: Use this command with the port of your choosing. In our example, we’re using 8008. beame-insta-ssl tunnel 8008 http

zglozman commented 7 years ago

Where in the world are you ? And what's the best time for a call to just help u configure it. Mail me at Z@beame.io

It will take a few mins and I will take u up on the offer of updating the samples

ilyash commented 7 years ago

Closing due to inactivity