https without certificate redirects to panel
#1
https without certificate redirects to panel
Hello

I've seen this issue before but I somehow forgot about it or ignored it. Now when testing again, this issue popped up again, but this is not a configuration issue by me, I think.

So, I have certbot and multiple domains with SSL configured and they work fine. Both https and http redirects normally to the https domain itself.
but
a domain without a certificate and no ssl-related configuration works fine with http and redirects to the domain, BUT, when adding https to the same domain, it redirects to the sentora panel instead after the browser warns of a non-trusted self signed certificate.

Why? How can I diagnose this?

Regards
iraqiboy90
Reply
#2
RE: https without certificate redirects to panel
bump?
Reply
#3
RE: https without certificate redirects to panel
Any support on this one please?
Reply
#4
RE: https without certificate redirects to panel
Without seeing the conf file we can't help.

Please avoid DM for support. You will be ignored next time.
No support using PM (Auto adding to IGNORE list!), use the forum. 
How to ask

200$ free to start your VPS 60 days credit
Reply
#5
RE: https without certificate redirects to panel
Thanks for the reply.
(04-22-2020, 12:02 AM)Me.B Wrote: Please avoid DM for support. You will be ignored next time.
I will avoid it next time

Here are the two apache conf files within sentora config folder:

httpd.conf
Code:
# Sentora Apache Include file # Written by Bobby Allen, 15/05/2011 # Set the Sentora Alias (used for development, sable will eventually use a VHOST) #Alias /Sentora /etc/sentora/panel # Set a default server name for the master configuration to supress Apache daemon warnings ServerName localhost # Setup the directory settings and PHP security flags for the Sentora application directory. <Directory /etc/sentora/panel>    Options +FollowSymLinks    DirectoryIndex index.php    <IfModule mod_php5.c>        AddType application/x-httpd-php .php        php_flag magic_quotes_gpc Off        php_flag track_vars On        php_flag register_globals Off        php_admin_value upload_tmp_dir /var/sentora/temp    </IfModule> </Directory> # Disallow web access to directories that don't need it/that we don't want people looking in! <Directory /etc/sentora/panel/cnf/>    Require all denied </Directory> <Directory /etc/sentora/panel/modules/*/hooks>    Require all denied </Directory> # Set server tokens ServerTokens Prod # Now we include the generic VHOST configuration file that holds all Sentora user hosted vhost data Include /etc/sentora/configs/apache/httpd-vhosts.conf

And this is the httpd-vhosts.conf (too long to be pasted here)
Code:
https://pastebin.com/f2PvQJZv

The problem happens with domain delta.no. Since this is the only domain I can test that does not have a SSL configuration on. I'm connecting to it by changing the windows host file to direct the domain to the IP of the server this conf file is located at, because it's actually located somewhere else with DNS.

Domain names has been changed for what I assume can be a slightly privacy improvement, since this is a public forum Smile
Reply
#6
RE: https without certificate redirects to panel
Still an issue
Reply
#7
RE: https without certificate redirects to panel
(10-06-2020, 07:01 AM)iraqiboy90 Wrote: Still an issue

Please attach your httpd-vhosts.conf file. I will see if I can help you quickly.
-Jettaman-

NEW: Sentora v.2.0.2 has been released!!!

Sentora's quick recovery depends on community support and donations. We need to stand as one and help Sentora into the future.

Donate HERE and do your part. We thank you for your support.
Reply
#8
RE: https without certificate redirects to panel
(10-06-2020, 12:02 PM)Jettaman Wrote: Please attach your httpd-vhosts.conf file. I will see if I can help you quickly.

It's the same one in my previous comment https://pastebin.com/f2PvQJZv
But can send you the uncensored one in PM
Reply
#9
RE: https without certificate redirects to panel
I think I found the issue. It has something to do with cloudflare. Pretty stupid from my part I think.

[Image: adfc4aa5e94f85c5257ea97acb575c5c.png]
A new domain added to cloudflare gets this option automatically enabled. It's obvious that this needs to be disabled since the domain is not running an SSL.

Changing it to semi-disabled is enough for my case since this domain gets redirected by sentora to another domain.
[Image: 6d6c66a1c67290c7e7e52b9834ed34f5.png]
Reply
#10
RE: https without certificate redirects to panel
nevermind. The problem is still there.... Cloudflare is not managing the DNS with this new test...

I'm going to do a new install of centos and sentora on a vm to test...
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
Improving Security on Your Sentora Panel: Best Practices DylanForeman 0 439 05-27-2025, 06:10 PM
Last Post: DylanForeman
How to run multiple version PHP with Apache (use Sentora panel) on Centos ??? BigBang 4 11 ,393 12-23-2020, 03:31 PM
Last Post: djkashdui1
Having both HTTP & HTTPS (Port 443 and Port 80) sites on a server dsmarter 14 52 ,010 08-22-2020, 02:49 PM
Last Post: kenzopoker1

Forum Jump:


Users browsing this thread: 1 Guest(s)