- Posts: 1
- Thank you received: 0
Welcome to the LimeSurvey Community Forum
Ask the community, share ideas, and connect with other LimeSurvey users!
Problems with SSL/TLS
- bumblebee
- Topic Author
- Offline
- New Member
Less
More
5 years 4 months ago #177937
by bumblebee
Problems with SSL/TLS was created by bumblebee
Hey,
I'm very sorry if this problem is placed in the wrong category, but I have no idea where to post it. So if it's wrong here, please move the post to another, better, place.
To my problem I have:
I can't run LimeSurvey via https. I always get the information, that I'm redirected too many times. This is quite confusing for me because I have a similar configuration for my apache webserver for other hosts and it works fine there. Here is my config to show you:
Maybe I just don't see it, but I can't find a loop in the config. Maybe there is something in LimeSurvey, which I don't know, that trys to redirect me back to http?
Does anyone have an idea?
Some more inforamtion:
System:
Distributor ID: Ubuntu
Description: Ubuntu 18.04.1 LTS
Release: 18.04
Codename: bionic
Kernel:
4.15.0-34-generic x86_64
Database:
mysql Ver 14.14 Distrib 5.7.24
Webserver:
Server version: Apache/2.4.29 (Ubuntu)
Server built: 2018-10-03T14:41:08
PHP:
PHP 7.2.10-0ubuntu0.18.04.1 (cli) (built: Sep 13 2018 13:45:02) ( NTS )
LimeSurvey:
Version 3.14.9+180917
I'm very sorry if this problem is placed in the wrong category, but I have no idea where to post it. So if it's wrong here, please move the post to another, better, place.
To my problem I have:
I can't run LimeSurvey via https. I always get the information, that I'm redirected too many times. This is quite confusing for me because I have a similar configuration for my apache webserver for other hosts and it works fine there. Here is my config to show you:
Code:
<VirtualHost *:80> ServerName limesurvey.example.com Redirect / https://limesurvey.example.com/ </VirtualHost> <IfModule mod_ssl.c> <VirtualHost _default_:443> ServerAdmin support@example.com ServerName limesurvey.example.com DocumentRoot /var/www/html/limesurvey ErrorDocument 404 https://limesurvey.example.com LogLevel info ssl:debug ErrorLog ${APACHE_LOG_DIR}/error.log CustomLog ${APACHE_LOG_DIR}/access.log combined SSLEngine on SSLCertificateFile /etc/ssl/certs/filename.crt SSLCertificateKeyFile /etc/ssl/private/private.key SSLCertificateChainFile /etc/ssl/certs/certifcate.crt SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH SSLProtocol All -SSLv2 -SSLv3 SSLHonorCipherOrder On Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" Header always set X-Frame-Options SAMEORIGI SSLCompression off </VirtualHost> </IfModule>
Maybe I just don't see it, but I can't find a loop in the config. Maybe there is something in LimeSurvey, which I don't know, that trys to redirect me back to http?
Does anyone have an idea?
Some more inforamtion:
System:
Distributor ID: Ubuntu
Description: Ubuntu 18.04.1 LTS
Release: 18.04
Codename: bionic
Kernel:
4.15.0-34-generic x86_64
Database:
mysql Ver 14.14 Distrib 5.7.24
Webserver:
Server version: Apache/2.4.29 (Ubuntu)
Server built: 2018-10-03T14:41:08
PHP:
PHP 7.2.10-0ubuntu0.18.04.1 (cli) (built: Sep 13 2018 13:45:02) ( NTS )
LimeSurvey:
Version 3.14.9+180917
The topic has been locked.
- DenisChenu
- Away
- LimeSurvey Community Team
Less
More
- Posts: 13620
- Thank you received: 2488
5 years 4 months ago #177949
by DenisChenu
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
Replied by DenisChenu on topic Problems with SSL/TLS
Maybe you force https to OFF in settings.
manual.limesurvey.org/Global_settings#Security
We don't have inverse than ssl_emergency_override … then if you can't access to GUI : need to do it via DB directly.
manual.limesurvey.org/Global_settings#Security
We don't have inverse than ssl_emergency_override … then if you can't access to GUI : need to do it via DB directly.
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.