openziti / ziti-browzer-runtime

The Ziti JS runtime auto-bootstrapped into a web app running under BrowZer
Apache License 2.0
4 stars 2 forks source link

NTOPNG Application Failure - Login Hang #307

Open NicFragale opened 2 months ago

NicFragale commented 2 months ago

WHO (Actors): NTOP (Next Gen) is a multi-platform packet monitoring and alerting system. It uses a web-interface to display results of its analysis. BrowZer is used to make private this web interface while allowing a user to gain access to it over the Internet. WHAT: A login failure occurs while using BrowZer with HTTPS enabled. It has been confirmed that the failure is not present without BrowZer. If HTTPS functionality is turned off, BrowZer does work. Utilizinf Ziti Edge Tunnel as a client vs BrowZer works correctly with HTTPS access and login. HOW: To invoke this behavior...

  1. Install NTOPNG using the repo of the host (IE apt/yum) or via download of the app from the NTOP website.
  2. HTTPS must be enabled on the application in configuration files. I used the IP address of the host and port 443 as the listening port for the web interface. I turned off forwarding for HTTP to HTTPS to simplify the configuration.
  3. Enable BrowZer in the usual way and point it towards a Ziti service configured to intercept the DNS record configured in the certificate used for validating HTTPS and port 443. Forwarding should be left on for both IP and PORT.
  4. Use BrowZer to navigate to the target BrowZer App URL. The page will load and prompt for USERNAME/PASSWORD.
  5. After entering USERNAME/PASSWORD, observe the hanging of the page. This occurs after the service worker loads the "authorize.html" document.

image