Problem redirecting http to https

Get Help
1

Hello everybody,
I’ve recently installed OOD over a Rocky Linux 8.6 and configured /etc/ood/config/ood_portal.yml to point to my certificates like this:

servername: webfrontal.uca.es
ssl:

  • ‘SSLCertificateFile “/etc/pki/tls/certs/webfrontal.uca.es.pem”’
  • ‘SSLCertificateKeyFile “/etc/pki/tls/private/webfrontal.uca.es.key”’
  • ‘SSLCertificateChainFile “/etc/pki/tls/certs/Sectigo.pem”’

and restarted Apache services.
But the portal still does not redirect http to https. Need I some more configuration?
OOD version: 3.0.0
Thanks in advance.

2

Hello and welcome!

Did you run the update_ood_portal command before the restart of apache?

3

I did it without result. But now I’ve rebooted the whole computer and it seems to work now.
Although now I’m getting a 500 error which I’ll have to look into.
Thanks for your help.

4

Ok. In the future just remember to run that command each time you make a change to the ood_portal.yml so that the values you set there can be written to the correct config files for apache and your auth, and then do the restarts for apache and ood.

5

Hi Folks,

I have this same exact issue. Base Install on RHEL9.

http://fqdn redirects to http://fqdn/public/need_auth.html

The only changes I’ve made to /etc/ood/config/ood_portal.yml is add the following :

servername: fqdn
ssl:
  - 'SSLCertificateFile "/etc/pki/tls/certs/fqdn.cert"'
  - 'SSLCertificateKeyFile "/etc/pki/tls/private/fqdn.key"'
  - 'SSLCertificateChainFile "/etc/pki/tls/certs/fqdn-interm.crt"'

Every time I run update_ood_portal, it says no change in Apache config. I’ve tried restarting httpd anyway to no vail.

[root@fqdn config]# /opt/ood/ood-portal-generator/sbin/update_ood_portal
No change in Apache config.
Completed successfully!

Edit:
https://fqdn takes me to the RHEL-Apache test page.

Thanks in advance!

6

Do you get the same working state after rebooting the actual machine like @juanca-uca above?

7

There was no change in the behavior, even after a reboot.

8

I.e. it just takes me to the landing page that says “Welcome to Open OnDemand!” :

You have successfully installed Open OnDemand. 

However, you now have to configurure authentication for this apache instance. See the authentication documentation for all the options available.
9

Is it using https to connect to that page it shows you or is it still http? I’m trying to understand if the SSL is working but you just need to set the authentication up.

10

It is still using http. I have yet to set up auth. I was following the docs and I was unable to get http to redirect to https.

11

Ok, i’m going to have to dig into this deeper on my side as something doesn’t seem right. I had to reboot my ubuntu install at this step for things to work (which shouldn’t be needed and isn’t documented) and now I’m about to walk through with RHEL 9 and see what happens.

12

Thanks for the help, I will let you know if I make any headway into this.

13

So, it could be the docs are just organized poorly. I’m being told that if you setup your authentication, then this redirect should stop and the https will work…

I’m still going to walk through this because something seems off with what we are asking users to do, and what they are seeing, and what is actually assumed you have completed at various steps because it seems like this assumes auth is steup, yet auth is the next step.

14

Ok, I will continue setting up authentication and get back to you.

15

You were spot on. Once I setup Auth, https started working.

Thanks for the help!

16

Great! I think we are still going to do some rearrangement of that section of the docs to make the instructions flow a little cleaner so you don’t have to jump steps to do the auth after this.

1 Like