jOpenSimWorld

Grid Status:	Offline

enabling SSL while having Non-SSL access so XMLRPC Group access still occurs.

SonjaGalileo
Topic Author
Offline
Senior Boarder

3 years 3 months ago #3731 by SonjaGalileo

Ok, so far everything is running ok, not perfect but ok.

I want to be able to enable SSL access but every time I do I get access error for the XMLRPC module when trying to read the non ssl url for groups. I've even tried entering the https explicitly in the ini files. I HAVE to disable SSL for it all to work.

I would PREFER to have SSL access available. When you do, most people feel better about entering info and Google will index your site. They've gone on "record" that they "snub" non SSL site in the search engine.

This is the error I get when I enable SSL

2022-03-19 03:54:52,520 ERROR [XMLRPC-GROUPS-CONNECTOR]: An error has occured while attempting to access the XmlRpcGroups server method groups.getAgentActiveMembership at http://www.moonlightestates.me:80/jOpensim/index.php?option=com_opensim&view=interface: Cannot handle redirect from HTTP/HTTPS protocols to other dissimilar ones.

Any suggestions?

Please Log in to join the conversation.

SonjaGalileo
Topic Author
Offline
Senior Boarder

3 years 3 months ago #3732 by SonjaGalileo

Sorry about the double post, but I couldn't find an edit post function.

Anyhooo, I found a work around, kinda kludgy but it does the job.

In the DreamWorld GUI under SSL I enabled SSL.

Then I went into the Apache conf directory and edited the http.conf file.

Lines 194-200 I made sure it said "Define SSL"

# SSL/TLS Certificates
# HTTPS(SSL/TLS). You need to put certs in extras\Certs
# changed by Dreamgrid
Define SSL
<IfDefine SSL>
LoadModule ssl_module modules/mod_ssl.so
</IfDefine>

Then lines 339 to 341 I commented out.

#<IfModule ssl_module>    
#    RedirectMatch Permanent "^(/(?!Search/).*)" https://%{ServerName}$1
#</IfModule>

then lines 601-603 I commented out as well.

#RewriteEngine On
#RewriteCond %{HTTPS} !=off
#RewriteRule ^/?(.*) https://%{ServerName}/$1 [R,L]

These edits allow me to access the site with both http and https.

Now this is probably not the "proper" way to handle the situation, but it's working for now until a more "suitable' solution is presented.

Please Log in to join the conversation.

foto50
Offline
Administrator

3 years 3 months ago #3735 by foto50

Hi SonjaGalileo

and welcome to jOpenSim

Redirecting an xmlrpc request from http to https is not working, since the main data (more or less post data) is getting lost during the redirect.

solution should be to define in your OpenSim.ini in section

[Const]
...
jOpensimURL = "https://url-to-your-joomla"
...

directly, instead of http://

Depending on the certificate there in use you could run (like me using LetsEncrypt) into the issue of error lines with messages like "...untrusted cert..." or "...unable to verify cert..." or similar since OpenSim 0.9.2.x

In my case adding some values into

[Startup]
...
NoVerifyCertChain = true
NoVerifyCertHostname = true
...

solved that for me.

Sure someone can say it may be a "lowering" of security, but I think at the end the encrypted connection counts in that case, nothing else like "who issued that Cert"

Hope this helps
Greetz
FoTo50

Please Log in to join the conversation.

Time to create page: 0.071 seconds