Wednesday, May 22, 2019 2:55:31 AM
  • Posted: Tuesday, March 5, 2019 1:33 AM
  • 44
Hi

please i have grand ver 4.30 hosted on digitalocean - i try to install SSL as this link

https://grandnode.com/grandnode-430-how-to-install-ssl-updated

but when i run this command "sudo apt-get mod_ssl openssl" i got

Invalid operation mod_ssl


and in this post i don't know how to get PFX ??!!
Go to the folder with your PFX file. 


Note: i have try letsencrypt as this video (https://www.youtube.com/watch?v=m9aa7xqX67c) it works fine but i must each few days restart server because all images are not displayed using https and after restart it it works each time ?

so please can i have full steps right from a to z for making that works without any issues

thanks a lot .....
0
  • Posted: Tuesday, March 5, 2019 1:45 AM
  • 44
about lets encrypt i see console i found

err_cert_common_name_invalid


and after i restart server it works each time ??!!
0
  • Posted: Tuesday, March 5, 2019 6:34 AM
  • Moderator
  • 240
Hi Ahmed,

In the case of let's encrypt issues, did you change the UseForwardedHeaders setting in your appsettings.json file?

0
  • Posted: Tuesday, March 5, 2019 8:01 AM
  • 44
yes i have set it to true
0
  • Posted: Tuesday, March 5, 2019 8:13 AM
  • Moderator
  • 240
So it's something related with nginx configuration and redirects. Without knowledge about configuration I won't be able to help you.
0
  • Posted: Tuesday, March 5, 2019 8:23 AM
  • 44
this is nginx configuration file

server {
    listen 80;
    server_name   sale125.com www.sale125.com;
    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl;
    server_name   sale125.com www.sale125.com;

    ssl_certificate /etc/letsencrypt/live/sale125.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/sale125.com/privkey.pem;

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';

    root /var/Sale125;
    
    location / {
        proxy_pass         http://localhost:5002;
        proxy_set_header   Upgrade $http_upgrade;
        proxy_set_header   Connection keep-alive;
        proxy_set_header   Host $host;
        proxy_cache_bypass $http_upgrade;
    }

    location ~ /.well-known {
        allow all;
    }
}
0
  • Posted: Tuesday, March 5, 2019 8:33 AM
  • Moderator
  • 240
I noticed very sad thing. You asked for support many times, but generally you don't respect us, as an open source developers. You broke the license terms, when you deleted copyright information from the footer. We will be able to help you after fulfilling the license conditions.
0
  • Posted: Tuesday, March 5, 2019 8:55 AM
  • 44
Patryk wrote:
I noticed very sad thing. You asked for support many times, but generally you don't respect us, as an open source developers. You broke the license terms, when you deleted copyright information from the footer. We will be able to help you after fulfilling the license conditions.


Hi Patryk

I'm so sorry for that, but we plan to buy removable copyright tool before we go live end of this month, we are now on testing only - so sorry again for making you sad and i always respect you as one of the best open source

i have back your copy right to footer you can check it any time, i hope you accept my apologize again and because you are the best i'm waiting your help

thanks a lot .....
0