Join the conversation

Sign in to join this conversation, and others like it, in the communities you care about.

Wekan

Wekan is an open-source kanban board (Trello like) which allows a card-based task and to-do management.

Wekan / General

ssl

ssl

Wekan / General · January 21, 2020 at 8:30pm (Edited 4 years ago)

When you put wekan behind an elb with an ssl certificate everything works fine (everything really) until you click on the info hambuger in the middle of any wekan card. In Firefox it says Secure Connection Failed

An error occurred during a connection to xx.xx.xx.xx. SSL received a record that exceeded the maximum permissible length.

Error code: SSL_ERROR_RX_RECORD_TOO_LONG

and on chrome it says This site can’t provide a secure connection xx.xx.xx.xxsent an invalid response.

ERR_SSL_PROTOCOL_ERROR. Any idea how to remedy this? its something about date or something like this when you try and view the comments and labels or something (hard to know at this point. THanks

Just for grins I set a send path through the elb without the ssl and the info window pops up fine with all the details (member, assigned, due..... its something about that window encoding. Thanks

Load previous messages

March 7, 2020 at 8:29pm

tried all that and the HTTPS is erroring and not the HTTP

    • reply
    • like

    so if I could see the caddy logs maybe I could see a config error?

      • reply
      • like

      sudo snap logs wekan.caddy

        • reply
        • like

        do the certs and key file name matter?

          • reply
          • like

          ok looking

            • reply
            • like

            wow that is a hint

              • reply
              • like

              error: snap "wekan" has no service "caddy"

                • reply
                • like

                its wekan.caddy?

                  • reply
                  • like

                  or wekan wekan.caddy?

                    • reply
                    • like

                    Anyway, full logs are at /var/log/syslog

                      • reply
                      • like

                      sudo tail -1000 /var/log/syslog | less

                        • reply
                        • like

                        Mar 7 19:49:40 ip-172-31-35-186 wekan.caddy[3205]: 2020/03/07 19:49:40 /var/snap/wekan/common/Caddyfile:24 - Error during parsing: Unable to load certificate and key files for 'http://devkanban.xxxxxxxx.com': tls: failed to find any PEM data in key input

                          • reply
                          • like

                          some sort of syntax thing

                            • reply
                            • like

                            will keep looking

                              • reply
                              • like

                              thanks

                                • reply
                                • like

                                tried a few but using the three section file for the cert

                                  • reply
                                  • like

                                  I believe the naming of the files and the urls is probably the issue,

                                    • reply
                                    • like

                                    just not sure why t not parsing

                                      • reply
                                      • like

                                      than thanks for point out how to look

                                        • reply
                                        • like

                                        thanks

                                          • reply
                                          • like

                                          Maybe in Caddyfile it complains about http address, if it should have only https address

                                            • reply
                                            • like

                                            When using Let's encrypt it's only domain like example.com , without http and https

                                              • reply
                                              • like

                                              In cloudflare I have http https , to specify them separately

                                                • reply
                                                • like

                                                in cert file 1. private key 2. cert . There should be no space between them.

                                                  • reply
                                                  • like

                                                  it seems to work for me at https://releases.wekan.team/

                                                    • reply
                                                    • like