Forum OpenACS Development: ssl setup

Collapse
1: ssl setup
Posted by Raul Rodriguez on 09/28/17 04:45 AM
I installed openacs and naviserver on Ubuntu 14.04 using the scripts here:

https://openacs.org/xowiki/naviserver-openacs

I did not find any documentation on how to setup ssl on openacs/naviserver. Does anyone have any information on this?

Thank you

Collapse
2: Re: ssl setup (response to 1)
Posted by Iuri Sampaio on 09/28/17 07:01 AM
Raul,
NS already comes with nsssl built in.

Do you have SSL certificates already?

If so, you just need to edit your oacs config file for NS. On ubuntu installation the filename is usually as in "oacs-config.tcl"

Uncomment line 549
#if {[info exists address_v4]} ...

and modify paths to your certs, at line 424
ns_param certificate $serverroot/etc/

lines may vary depending on oacs-config.tcl

Be aware of .pem format file. IT must be fullchain plus private key.

Best wishes

Collapse
3: Re: ssl setup (response to 1)
Posted by Gustaf Neumann on 09/28/17 09:31 AM
The documentation of the NaviServer modules is in NaviServer. I've just now updated the sample config file of NaviServer for OpenACS (used in the scripts) to require just setting the https port in the top section [2]. This will be included in the next NaviServer release. You might consider using the new letsencrypt module of NaviServer [3] for obtaining a certificate.

All the best
-gn

[1] https://naviserver.sourceforge.io/n/nsssl/files/nsssl.html
[2] https://bitbucket.org/naviserver/naviserver/commits/5436d27a76802882b66d2e701a781a40693028db
[3] https://bitbucket.org/naviserver/letsencrypt

Collapse
4: Re: ssl setup (response to 3)
Posted by Raul Rodriguez on 09/30/17 06:59 AM
I was able to create a cert, via the nsssl instructions, that worked for the server in my internal network.

Thank you