Koozali.org: home of the SME Server

Obsolete Releases => SME 7.x Contribs => Topic started by: boobee on April 01, 2007, 02:39:39 AM

Title: weird ssl issues
Post by: boobee on April 01, 2007, 02:39:39 AM

Hi,
i installed these two contribs on sme7.1.3,

- smeserver-phpmyadmin-2.10.0.2-0.dmay
- smeserver-torrentflux-0.9-3

but cannot access both of them. Before even thinking of raising a bug, i'd like to have some feedback, as it's a misconfiguration for sure.

as i said, both of them are not accessible via https, smeserver-torrentflux throws an http 403 for https://server/torrent, log says

Code: [Select]

[error] [client 192.168.10.247] client denied by server configuration: /home/e-smith/files/ibays/torrent/html

configuration is:

Code: [Select]


[root@ctu ~]# config show torrentflux
torrentflux=service
DbPassword=ciGe7pk22***********************NKnaZMnrSm2ymHYCung4JfkVsx6z5
    Name=Torrent client
    PublicAccess=global-pw-remote


httpd.conf (this seems to be very wrong, anyway modified to point /opt but no good)

Code: [Select]

   
<VirtualHost 0.0.0.0:443>
[...]
ScriptAlias /torrent/cgi-bin /home/e-smith/files/ibays/torrent/cgi-bin
    Alias       /torrent/files   /home/e-smith/files/ibays/torrent/files
    Alias       /torrent        /home/e-smith/files/ibays/torrent/html


phpmyadmin contrib asks for user/password, then frameset loads (page's <title> is rendered ok), but both frames aren't loading, firefox loops and tells something like "the site is redirecting the request for this address in a way it will never get completed", and it happens with ssl-only.
if i comment out SSLRequireSSL it loads fine in plain http.

Code: [Select]


# phpMyAdmin
Alias /phpmyadmin /opt/phpmyadmin
<Directory /opt/phpmyadmin>
    #SSLRequireSSL
    Options -Indexes
    AllowOverride None
    order deny,allow
    deny from all
    allow from all
    AuthName "phpMyAdmin"
    AuthType Basic
    AuthExternal pwauth
    require user admin
    Satisfy all
    AddType application/x-httpd-php .php .php3
    php_flag  magic_quotes_gpc  on
    php_flag  track_vars        on
</Directory>


the only warning/error i get into httpd error_log is

Code: [Select]


[warn] RSA server certificate CommonName (CN) `ctu.domain' does NOT match server name!?


could that be the issue? any other log you may require is available.

sorry for the long post, and thanks for helping.

b.

Title: weird ssl issues
Post by: william_syd on April 01, 2007, 04:23:28 AM

Did you create a ibay called torrent? If so get rid of it (I think).

Title: weird ssl issues
Post by: boobee on April 01, 2007, 12:30:17 PM

Hi William, sorry, my bad.
I created that ibay to store downloaded data (it had to be very late tonight..), but I suppose it's better to create a new one with different name.
Anyway, removed the ibay, uninstalled torrentflux and reinstalled, modified config.php, now I get the welcome screen, admin/admin then back again the loop,

Quote

https://ctu/torrent/login.phptorrent/login.phptorrent/login.phptorrent/login.phptorrent/logi...

and the firefox error about the site trying to redirect the url, which is the same issue I have for phpmyadmin.

thanks

Title: weird ssl issues
Post by: bpivk on April 01, 2007, 12:36:11 PM

Did you try another browser.
I didn't have any problems with firefox on linux or opera and explorer on windows but it's worth a shot.

Title: weird ssl issues
Post by: boobee on April 01, 2007, 12:40:23 PM

yup, tried that too, ie7 just complains of a dns error after admin/admin, while firefox gives me at least the redirection error

edit: lynx on same sme7 loops too adding at each acceptance of the invalid self signed cert a /login.phptorrent to the end of the url

Title: weird ssl issues
Post by: Franco on April 01, 2007, 02:21:15 PM

it should be

Code: [Select]

torrent/login.php

Do you have SAIL installed?

Title: weird ssl issues
Post by: boobee on April 01, 2007, 02:51:03 PM

Quote from: "stuntshell"

Do you have SAIL installed?

yes...

Title: weird ssl issues
Post by: Franco on April 01, 2007, 02:59:36 PM

Then be sure to disable the proxy function in the general settings, if you need to use this function then you'll have to make an entry for /torrent.

Title: weird ssl issues
Post by: boobee on April 01, 2007, 03:02:17 PM

damn, it was SO easy...

THANK YOU VERY MUCH stuntshell! :D