Flarum won't accept HTTPS

ShadowArmadyl

I have Flarum installed successfully.

I currently have my Flarum using the domain 'f.domain.com'.
When I try to edit the config.php file so it uses 'https://f.domain.com', it will give me a blank content page with the error "Something went wrong while trying to load the full version of this site."

Not sure why it's doing this. I am using CloudFlare, by the way.
I don't have Rocket Loader enabled.

BlackSheep

Please enable the debug mode in the config.php file and report the full error here.

ShadowArmadyl

After enabling debug mode, it shows a blank page with the forum name and nothing else.

Here's what I get in my browser's console:
https://f.shadow.ga/assets/forum-05851ebd.js Failed to load resource: the server responded with a status of 521 ()
https://f.shadow.ga/assets/forum-en-df77f08d.js Failed to load resource: the server responded with a status of 521 ()
https://f.shadow.ga/assets/logo-bocwsk9d.png Failed to load resource: the server responded with a status of 521 ()
https://f.shadow.ga/assets/forum-1234d776.css Failed to load resource: the server responded with a status of 521 ()
https://f.shadow.ga/assets/forum-05851ebd.js Failed to load resource: the server responded with a status of 521 ()
https://f.shadow.ga/assets/forum-en-df77f08d.js Failed to load resource: the server responded with a status of 521 ()
f.shadow.ga/:107 Uncaught ReferenceError: System is not defined
at f.shadow.ga/:107
https://f.shadow.ga/assets/favicon-eeofxq9b.ico Failed to load resource: the server responded with a status of 521 ()
https://f.shadow.ga/assets/forum-1234d776.css Failed to load resource: the server responded with a status of 521 ()

[deleted]

ShadowArmadyl Does the host or hosting plan you are using support https ?

ShadowArmadyl

[deleted] Yes, DigitalOcean supports HTTPS.

webeindustry

Cloudflare doesn't play well with Flarum. Personally I refuse to use anything cloudflare. They technically act as MITM. Try letsencrypt and drop cloudflare. I bet it'll work out for you then.

BlackSheep

webeindustry I second this.

ShadowArmadyl

webeindustry I tried LetsEncrypt, the same exact result happened.

webeindustry

ShadowArmadyl

When you tried letsencrypt, did you have cloudflare disabled?

ShadowArmadyl

webeindustry I changed the DNS setting to "DNS only"

webeindustry

Try a curl request:

curl -v https://example.com

ShadowArmadyl

webeindustry
Rebuilt URL to: https://m.shadow.ga/
Hostname was NOT found in DNS cache
Trying 151.101.192.133...
Connected to m.shadow.ga (151.101.192.133) port 443 (#0)
successfully set certificate verify locations:
CAfile: none
CApath: /etc/ssl/certs
SSLv3, TLS handshake, Client hello (1):
SSLv3, TLS handshake, Server hello (2):
SSLv3, TLS handshake, CERT (11):
SSLv3, TLS handshake, Server key exchange (12):
SSLv3, TLS handshake, Server finished (14):
SSLv3, TLS handshake, Client key exchange (16):
SSLv3, TLS change cipher, Client hello (1):
SSLv3, TLS handshake, Finished (20):
SSLv3, TLS change cipher, Client hello (1):
SSLv3, TLS handshake, Finished (20):
SSL connection using ECDHE-RSA-AES128-GCM-SHA256
Server certificate:
subject: C=US; ST=California; L=San Francisco; O=Fastly, Inc.; CN=www.github.com
start date: 2016-01-20 00:00:00 GMT
expire date: 2017-04-06 12:00:00 GMT
subjectAltName does not match m.shadow.ga
SSL: no alternative certificate subject name matches target host name 'm.shadow.ga'
Closing connection 0
* SSLv3, TLS alert, Client hello (1):
curl: (51) SSL: no alternative certificate subject name matches target host name 'm.shadow.ga'

webeindustry

You've got the wrong cert trying to work for that domain. Follow the guide for letsencyrpt. You need to generate the cert and place the path in your vhost file with nginx/apache2. Also, does that IP even match your server? It kind of looks like you're bouncing around fastly CDN becasue there's no direct resolution to your server. Is the a-record set?

I'd look to those two first. A-record and your v-host file.

ShadowArmadyl

webeindustry Did that and I received an error:

Failed authorization procedure. f.shadow.ga (tls-sni-01): urn:acme:error:tls :: The server experienced a TLS error during domain verification :: Failed to conne ct to 104.27.171.4:443 for TLS-SNI-01 challenge

IMPORTANT NOTES:
- The following errors were reported by the server:

Domain: f.shadow.ga
Type: tls
Detail: Failed to connect to 104.27.171.4:443 for TLS-SNI-01
challenge

To fix these errors, please make sure that your domain name was
entered correctly and the DNS A record(s) for that domain
contain(s) the right IP address. Additionally, please check that
you have an up-to-date TLS configuration that allows the server to
communicate with the Certbot client.

ShadowArmadyl

webeindustry My A record for the IP is set.

webeindustry

Please add this inside your vhost server block:

location ~ /.well-known { allow all; }

& try to get a cert issued again.

ShadowArmadyl

webeindustry I'm a bit of a noob. Where is the vhost server block?

webeindustry

Are you using nginx?

If so you want to go to /etc/nginx/sites-enabled and look for your .conf file that has the information for flarum.

Find:

server {

& stuff that in there cleanly.

Then issue:

nginx -t

If that shows success:

service nginx reload

You really want to follow a guide for letsencrypt. This is a bit outside the scope of flarum and we'll be going back and forth for a while unless you find a good guide.

ASSUMPTION:

Ubuntu 16.04 + Nginx

https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-16-04

ShadowArmadyl

webeindustry I am using Apache.

webeindustry

ShadowArmadyl

Ubuntu 16.04 + Apache:

https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-ubuntu-16-04

ShadowArmadyl

webeindustry
This happens when I attempt to run 'sudo apt-get install python-letsencrypt-apache'

flarum@shadowga:~$ sudo apt-get install python-letsencrypt-apache
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Unable to locate package python-letsencrypt-apache