Join the conversation

Sign in to join this conversation, and others like it, in the communities you care about.

Wekan

General

Wekan is an open-source kanban board (Trello like) which allows a card-based task and to-do management.

More active conversations

Wekan / General

ssl

ssl

Wekan/General · January 21, 2020 at 8:30pm

Paul Verdone

@pvcon13
rep
1.5k

ssl

Wekan / General · January 21, 2020 at 8:30pm (Edited 4 years ago)

When you put wekan behind an elb with an ssl certificate everything works fine (everything really) until you click on the info hambuger in the middle of any wekan card. In Firefox it says Secure Connection Failed

An error occurred during a connection to xx.xx.xx.xx. SSL received a record that exceeded the maximum permissible length.

Error code: SSL_ERROR_RX_RECORD_TOO_LONG

and on chrome it says This site can’t provide a secure connection xx.xx.xx.xxsent an invalid response.

ERR_SSL_PROTOCOL_ERROR. Any idea how to remedy this? its something about date or something like this when you try and view the comments and labels or something (hard to know at this point. THanks

Just for grins I set a send path through the elb without the ssl and the info window pops up fine with all the details (member, assigned, due..... its something about that window encoding. Thanks

Load previous messages
March 7, 2020 at 8:29pm
Paul Verdone@pvcon13
8:29pm

so if I could see the caddy logs maybe I could see a config error?

    • reply
    • like
    Lauri Ojansivu@xet7
    Team
    8:30pm

    sudo snap logs wekan.caddy

      • reply
      • like
      Paul Verdone@pvcon13
      8:30pm

      do the certs and key file name matter?

        • reply
        • like
        8:30pm

        ok looking

          • reply
          • like
          8:31pm

          wow that is a hint

            • reply
            • like
            8:31pm

            error: snap "wekan" has no service "caddy"

              • reply
              • like
              8:32pm

              its wekan.caddy?

                • reply
                • like
                8:32pm

                or wekan wekan.caddy?

                  • reply
                  • like
                  Lauri Ojansivu@xet7
                  Team
                  8:34pm

                  Anyway, full logs are at /var/log/syslog

                    • reply
                    • like
                    8:34pm

                    sudo tail -1000 /var/log/syslog | less

                      • reply
                      • like
                      Paul Verdone@pvcon13
                      8:45pm

                      Mar 7 19:49:40 ip-172-31-35-186 wekan.caddy[3205]: 2020/03/07 19:49:40 /var/snap/wekan/common/Caddyfile:24 - Error during parsing: Unable to load certificate and key files for 'http://devkanban.xxxxxxxx.com': tls: failed to find any PEM data in key input

                        • reply
                        • like
                        8:46pm

                        some sort of syntax thing

                          • reply
                          • like
                          8:46pm

                          will keep looking

                            • reply
                            • like
                            8:46pm

                            thanks

                              • reply
                              • like
                              8:47pm

                              tried a few but using the three section file for the cert

                                • reply
                                • like
                                8:47pm

                                I believe the naming of the files and the urls is probably the issue,

                                  • reply
                                  • like
                                  8:47pm

                                  just not sure why t not parsing

                                    • reply
                                    • like
                                    8:48pm

                                    than thanks for point out how to look

                                      • reply
                                      • like
                                      8:48pm

                                      thanks

                                        • reply
                                        • like
                                        Lauri Ojansivu@xet7
                                        Team
                                        8:48pm

                                        Maybe in Caddyfile it complains about http address, if it should have only https address

                                          • reply
                                          • like
                                          8:48pm

                                          When using Let's encrypt it's only domain like example.com , without http and https

                                            • reply
                                            • like
                                            8:49pm

                                            In cloudflare I have http https , to specify them separately

                                              • reply
                                              • like
                                              8:49pm

                                              in cert file 1. private key 2. cert . There should be no space between them.

                                                • reply
                                                • like
                                                8:50pm

                                                it seems to work for me at https://releases.wekan.team/

                                                  • reply
                                                  • like
                                                  8:52pm

                                                  I use CloudFlare page rules to redirect to https. SSL/TLS Full (Strict)

                                                    • reply
                                                    • like