Welcome to the LimeSurvey Community Forum

Ask the community, share ideas, and connect with other LimeSurvey users!

Problems with SSL/TLS

  • bumblebee
  • bumblebee's Avatar Topic Author
  • Offline
  • New Member
  • New Member
More
5 years 4 months ago #177937 by bumblebee
Problems with SSL/TLS was created by bumblebee
Hey,

I'm very sorry if this problem is placed in the wrong category, but I have no idea where to post it. So if it's wrong here, please move the post to another, better, place.

To my problem I have:

I can't run LimeSurvey via https. I always get the information, that I'm redirected too many times. This is quite confusing for me because I have a similar configuration for my apache webserver for other hosts and it works fine there. Here is my config to show you:
Code:
<VirtualHost *:80>
    ServerName limesurvey.example.com
    Redirect / https://limesurvey.example.com/
</VirtualHost>
 
<IfModule mod_ssl.c>
        <VirtualHost _default_:443>
                ServerAdmin support@example.com
                ServerName limesurvey.example.com
                DocumentRoot /var/www/html/limesurvey
 
                ErrorDocument 404 https://limesurvey.example.com
                LogLevel info ssl:debug
 
                ErrorLog ${APACHE_LOG_DIR}/error.log
                CustomLog ${APACHE_LOG_DIR}/access.log combined
 
                SSLEngine on
 
                SSLCertificateFile      /etc/ssl/certs/filename.crt
                SSLCertificateKeyFile /etc/ssl/private/private.key
                SSLCertificateChainFile /etc/ssl/certs/certifcate.crt
 
                SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
                SSLProtocol All -SSLv2 -SSLv3
                SSLHonorCipherOrder On
                Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
                Header always set X-Frame-Options SAMEORIGI
                SSLCompression off              
 
 
        </VirtualHost>
</IfModule>

Maybe I just don't see it, but I can't find a loop in the config. Maybe there is something in LimeSurvey, which I don't know, that trys to redirect me back to http?

Does anyone have an idea?

Some more inforamtion:

System:
Distributor ID: Ubuntu
Description: Ubuntu 18.04.1 LTS
Release: 18.04
Codename: bionic

Kernel:
4.15.0-34-generic x86_64

Database:
mysql Ver 14.14 Distrib 5.7.24

Webserver:
Server version: Apache/2.4.29 (Ubuntu)
Server built: 2018-10-03T14:41:08

PHP:
PHP 7.2.10-0ubuntu0.18.04.1 (cli) (built: Sep 13 2018 13:45:02) ( NTS )

LimeSurvey:
Version 3.14.9+180917
The topic has been locked.
  • DenisChenu
  • DenisChenu's Avatar
  • Offline
  • LimeSurvey Community Team
  • LimeSurvey Community Team
More
5 years 4 months ago #177949 by DenisChenu
Replied by DenisChenu on topic Problems with SSL/TLS
Maybe you force https to OFF in settings.

manual.limesurvey.org/Global_settings#Security

We don't have inverse than ssl_emergency_override … then if you can't access to GUI : need to do it via DB directly.

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.

Lime-years ahead

Online-surveys for every purse and purpose