Re: SSL TLS Cloudstack 4.13 Error

2020-02-24 Thread Andrija Panic
I don't, some community users have for sure, and here is a LMGTFY :) https://wiki.deimos.fr/HAProxy:_load_balance_your_traffic#Offloading_SSL (haven't tested this exact setup - but you will get the idea) - you can always play with simple yum install httpd on CentOS as the backend http server, and t

Re: SSL TLS Cloudstack 4.13 Error

2020-02-24 Thread Olivier Guin
I tried to use haproxy but without success, I cannot redirect port 443 to port 8080 ! Do you have an example of a haproxy conf ? Regards, Olivier Le 24/02/2020 à 15:22, Andrija Panic a écrit : > Great - it's like anything in it, restart and it works better... :) > > Our blog, says like this:

Re: SSL TLS Cloudstack 4.13 Error

2020-02-24 Thread Andrija Panic
Great - it's like anything in it, restart and it works better... :) Our blog, says like this: https://www.shapeblue.com/securing-cloudstack-4-11-with-https-tls/ (find it in the middle) But in production, one would usually use a reverse proxy like HaProxy and do SSL termination on this one. cheer

Re: SSL TLS Cloudstack 4.13 Error

2020-02-24 Thread Olivier Guin
1) consoleproxy.sslEnabled = false , restart mgmt, destroy CPVM ONLY all  OK !  (UI using HTTP) 2) consoleproxy.sslEnabled = true , restart mgmt, destroy CPVM ONLY all  OK ! (UI using HTTP) consoleproxy.sslEnabled Enable SSL for console proxytrue consoleproxy.url.domain C

Re: SSL TLS Cloudstack 4.13 Error

2020-02-24 Thread Andrija Panic
login inside that linux box (CPVM) and see what's the apache configuration (ssl or not, netstat / listenting on 443 or not...etc) always easy to destroy CPVM (after mgmt server was restarted) and see if it fixes the issue For the start, set consoleproxy.sslEnabled=false, restart mgmt, destroy CPV

Re: SSL TLS Cloudstack 4.13 Error

2020-02-24 Thread Olivier Guin
Indeed, I can't connected to :443 ! But I don't have any firewall ! telnet 200.13.142.188 443  ( or 200-13-142-188.wayscom.net) Trying 200.13.142.188... telnet: connect to address 200.13.142.188: Connection refused conf ? of cpvm ? Regards, Olivier Le 24/02/2020 à 12:40, Andrija Panic a écri

Re: SSL TLS Cloudstack 4.13 Error

2020-02-24 Thread Andrija Panic
i.e. telnet 200-13-142-188.wayscom.net 443 Connecting To 200-13-142-188.wayscom.net... I can't connect to port 443 on this IP (from internet) On Mon, 24 Feb 2020 at 16:38, Andrija Panic wrote: > frame src= > "https://200-13-142-188.wayscom.net/ajax?token=x-Y76j1 >

Re: SSL TLS Cloudstack 4.13 Error

2020-02-24 Thread Andrija Panic
frame src= "https://200-13-142-188.wayscom.net/ajax?token=x-Y76j1 This looks fine ^^^ - it tries to load SSL URL what *exact* problem are you getting? On Mon, 24 Feb 2020 at 16:31, Olivier Guin wrote: > Ye

Re: SSL TLS Cloudstack 4.13 Error

2020-02-24 Thread Olivier Guin
Yes, consoleproxy.url.domain = *.wayscom.net consoleproxy.sslEnabled=true secstorage.ssl.cert.domain= *.wayscom.net secstorage.encrypt.copy=true For consoleproxy.url.domain : = *.wayscom.net   => 200-13-142-188.wayscom.net   from manager ping OK, from internet ping OK = console.wayscom.net  =>

Re: SSL TLS Cloudstack 4.13 Error

2020-02-24 Thread Andrija Panic
consoleproxy.sslEnabled=true is set in global config ? (a new thing in 4.11 that is not there in pre-4.11 releases and people sometimes miss this one) Regards, Andrija On Mon, 24 Feb 2020 at 15:24, Olivier Guin wrote: > Hello, > I am trying to set up ssl on systemvm. > I was able to migrate wi

SSL TLS Cloudstack 4.13 Error

2020-02-24 Thread Olivier Guin
Hello, I am trying to set up ssl on systemvm. I was able to migrate without problem from version 4.10 to version 4.13 but since impossible to set up the ssl correctly on my ssvm / cpvm? I follow the documentation (http://docs.cloudstack.apache.org/en/latest/adminguide/systemvm.html) as well as (