request SSL cert for domain

ruisdael-observatory / Ruisdael-Data-Catalog

repository to aid the creation of Ruisdael Data Catalog - documentation, resarch and scripts

https://ruisdael-catalog.citg.tudelft.nl

0 stars 0 forks source link

request SSL cert for domain #4

Closed andrecastro0o closed 2 weeks ago

andrecastro0o commented 2 weeks ago

following SSL certs recipe https://wiki01.grs.tudelft.nl/index.php?title=SSL_Certificates

config file: /etc/ssl/ruisdael.cfg
generated DH parameters: /etc/nginx/dhparam.pem
generated CSR (certificate signing request) /etc/ssl/ruisdael.csr
send CSR to ICT

andrecastro0o commented 2 weeks ago

while waiting for request have changed the wiki LocalSettings.php values for $wgScriptPath and $wgServer from https to http

[x] revert to https once CERT is in place

andrecastro0o commented 2 weeks ago

SSL certificate was received and set in VM. Webserver is serving the wiki with https to the whole internet at https://ruisdael-catalog.citg.tudelft.nl/index.php?title=Main_Page

andrecastro0o commented 2 weeks ago

Some issue is plaguing the HTTPS access

from nginx error log, I got:

2024/07/03 03:04:40 [crit] 43016#43016: *555 SSL_do_handshake() failed (SSL: error:0A0001BB:SSL routines::bad record type) while SSL handshaking, client: 131.180.126.252, server: 0.0.0.0:443
2024/07/03 03:04:41 [crit] 43016#43016: *556 SSL_read() failed (SSL: error:0A0001BB:SSL routines::bad record type) while waiting for request, client: 131.180.126.252, server: 0.0.0.0:443

andrecastro0o commented 2 weeks ago

Firewall was preventing access to wiki from outside intranet. TUD ICT has fixed the issue

wiki available at https://ruisdael-catalog.citg.tudelft.nl