Secure connection apache error

iotologist2 years ago

I followed the secure connection tutorial
https://www.traccar.org/secure-connection/

But I got an error when starting Apache, posted the pic link below

https://ibb.co/4VzJdZk

Please help.

Thanks

Macan2 years ago

show us your apache site config file

hairydog2 years ago

Last time I asked, it wasn't really possible to use the modern front end with a proxy that allows a secure server, unless you recompile it. And I don't know how! I got round this by removing the code that transfers to the modern interface.

It would be great if this wasn't needed, but I get the impression that there are no plans to change things. It looks as if my question and the answers to it have since been deleted. Hopefully that's a sign that things are changing.

Anton Tananaev2 years ago

it wasn't really possible to use the modern front end with a proxy that allows a secure server

This is a false information. It is possible.

iotologist2 years ago

This is the error

Apache 2: Syntax error on line 225 of /etc/apache2/apache2.conf

Line 225 on that file is

IncludeOptional sites-enabled/*.conf

And this is my traccar.conf, I copied it from the secure connection tutorial and changed the domain

<VirtualHost *:80>
  ServerName exodustrack.com
  Redirect / https://exodustrack.com/
</VirtualHost>
<IfModule mod_ssl.c>
        <VirtualHost _default_:443>

                ServerName exodustrack.com
                ServerAdmin webmaster@localhost

                DocumentRoot /var/www/html

                ProxyPass /api/socket ws://localhost:8082/api/socket
                ProxyPassReverse /api/socket ws://localhost:8082/api/socket

                ProxyPass / http://localhost:8082/
                ProxyPassReverse / http://localhost:8082/

                SSLEngine on
                SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem
                SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key

        </VirtualHost>
</IfModule>
Anton Tananaev2 years ago

Seems like some error with the conf file. I don't see any errors with the context, but maybe you have encoding problem or line end problem or something like that.

Niksu2 years ago

This is my file and it work fine. You need to add your ssl cert files so it can work.

<IfModule mod_ssl.c>

         <VirtualHost *:443>
                ServerName domain.fi
                ServerAdmin 
                ProxyPass /api/socket ws://domain.fi:8085/api/socket
                ProxyPassReverse /api/socket ws://domain.fi:8085/api/socket
                ProxyPass / http://domain.fi:8085/
                ProxyPassReverse / http://domain.fi:8085/         
                SSLEngine on
                ServerAlias domain.fi
                SSLCertificateFile /etc/ssl/domain.fi.crt
                SSLCertificateKeyFile /etc/ssl/domain.fi.key
                SSLCertificateChainFile /etc/ssl/domain.fi.ca-bundle
        </VirtualHost>

       <VirtualHost *:4435>

                ServerName domain.fi
                ServerAdmin 
                ProxyPass / http://domain.fi:5095/
                ProxyPassReverse / http://domain.fi:5095/

                SSLEngine on
                SSLCertificateFile /etc/ssl/domain.fi.crt
                SSLCertificateKeyFile /etc/ssl/domain.fi.key
                SSLCertificateChainFile /etc/ssl/domain.fi.ca-bundle
        </VirtualHost>

</IfModule>
iotologist2 years ago

Anton is right, he's always right, I got this error on traccar.conf as he mentioned
"but maybe you have encoding problem or line end problem or something like that."

It's fixed now and secure.

Thanks Anton :)

hairydog2 years ago

Anton, I didn't say it isn't possible. I said it wasn't possible in the past.

In the past you told me that it was necessary to recompile the app to be able to do that. You also said that you didn't plan to change that.

Now you are telling me that it is possible. Something must have changed.

Anton Tananaev2 years ago

Nothing changed. If you want to use a different path for the app you have to recompile. But it has nothing to do with HTTPS proxy.