intermittent SSL connection
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
MAAS |
Fix Released
|
High
|
Blake Rouse | ||
2.3 |
Won't Fix
|
Undecided
|
Unassigned |
Bug Description
MAAS 2.1.1+bzr5544-
In order to comply with our DC firewall (we block port 80), we followed the following instructions to enable SSL:
https:/
Unfortunately, although we got MAAS region controller to respond via SSL (i.e. TCP Port 443), as soon as I login to the web ui,
https:/
MAAS region controller redirects my web client to a non-SSL connection to
http://
Also noticed the same thing when I log out, where it drops me out to a non-SSL connection login page
http://
With a firewall blocking tcp port 80, this causes the MAAS UI to appear hung as it times out on the non-SSL port 80 connection.
Changed in maas: | |
milestone: | none → 2.2.0 |
importance: | Undecided → High |
status: | New → Triaged |
tags: | added: docteam maasgh |
Changed in maas: | |
milestone: | 2.2.0 → 2.2.x |
Changed in maas: | |
milestone: | 2.2.x → 2.4.0rc2 |
Changed in maas: | |
assignee: | nobody → Blake Rouse (blake-rouse) |
Changed in maas: | |
status: | Invalid → Fix Released |
MAAS has no issues working with SSL. You didn't state the web server you are using, but here is the nginx.conf I used to confirm it works as expected. You most likely are not handing the websocket proxying correctly.
server {
listen 443 ssl;
server_name _; ssl/nginx. crt; e_key /etc/nginx/ ssl/nginx. key;
ssl_certificate /etc/nginx/
ssl_certificat
location / { localhost: 5240; proxy_params;
proxy_pass http://
include /etc/nginx/
}
location /MAAS/ws { localhost: 5240/MAAS/ ws;
proxy_ http_version 1.1;
proxy_ set_header Upgrade $http_upgrade;
proxy_pass http://
proxy_set_header Connection "Upgrade";
}
}