Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    URL for WebGUI doesnt work....

    webGUI
    4
    21
    371
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      viragomann @RobinH last edited by

      @robinh
      The browser shows an expired certificate.

      You have to assign a valid one in System > Advanced > Administration.

      R 1 Reply Last reply Reply Quote 0
      • R
        RobinH @viragomann last edited by

        @viragomann Yes, i know. But the one that I'm using is valid in Pfsence, but not in my browser.
        Why isnt the new date detected?

        88858571-b4ef-4eaf-9b58-55f2d859155e-image.png

        V 1 Reply Last reply Reply Quote 0
        • V
          viragomann @RobinH last edited by

          @robinh
          Indeed.
          Maybe a refresh of the website can help? Press Ctrl + F5.

          Or try another browser.
          You can also run an online SSL-check, for instance here: https://www.ssllabs.com/ssltest/

          R 1 Reply Last reply Reply Quote 0
          • R
            RobinH @viragomann last edited by

            @viragomann hmm... I ran the SSL-test and it shows the correct date for validation.
            But I cant get it right in my browsers, have tried the most common ones, Chrome, Edge, Firefox..

            H V johnpoz 3 Replies Last reply Reply Quote 0
            • H
              heper @RobinH last edited by

              @robinh you did restart the webgui right ?

              R 1 Reply Last reply Reply Quote 0
              • R
                RobinH @heper last edited by

                @heper Absolutely, it has been running since 2020 with the same URL since then.
                But on December 23, it just stopped working when the period expired and the new one doesn't seem to be detected.

                1 Reply Last reply Reply Quote 0
                • V
                  viragomann @RobinH last edited by

                  @robinh said in URL for WebGUI doesnt work....:

                  I ran the SSL-test and it shows the correct date for validation.
                  But I cant get it right in my browsers, have tried the most common ones, Chrome, Edge, Firefox..

                  So I assume that your browsers see another certificate than the online checker.
                  Is there an explanation for this? Do you access the web configurator from the internet or from inside? Do you pass the access through HAproxy?

                  R 2 Replies Last reply Reply Quote 0
                  • R
                    RobinH @viragomann last edited by

                    @viragomann The URL is just possible from a specifik external IP or by using VPN to the local IP.

                    V 1 Reply Last reply Reply Quote 0
                    • R
                      RobinH last edited by

                      @heper I read your comment a little too quickly and read “start”….
                      No, I have not restarted the Web Configurator individually, does that affect the firewall's function or does it run as usual?

                      There are many connections that affect several others if functions disappear.

                      johnpoz H 2 Replies Last reply Reply Quote 0
                      • johnpoz
                        johnpoz LAYER 8 Global Moderator @RobinH last edited by

                        @robinh said in URL for WebGUI doesnt work....:

                        Web Configurator individually, does that affect the firewall's function or does it run as usual?

                        Restarting the webgui does not affect routing/firewall function..

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 23.01 | Lab VMs CE 2.6, 2.7

                        1 Reply Last reply Reply Quote 0
                        • V
                          viragomann @RobinH last edited by

                          @robinh said in URL for WebGUI doesnt work....:

                          The URL is just possible from a specifik external IP or by using VPN to the local IP.

                          So I don't expect the SSL checker to see the same certificate as your browser.

                          1 Reply Last reply Reply Quote 0
                          • R
                            RobinH @viragomann last edited by

                            @viragomann The Web COnfiguration does not pass through HA-proxy

                            johnpoz 1 Reply Last reply Reply Quote 0
                            • H
                              heper @RobinH last edited by

                              @robinh said in URL for WebGUI doesnt work....:

                              @heper I read your comment a little too quickly and read “start”….
                              No, I have not restarted the Web Configurator individually, does that affect the firewall's function or does it run as usual?

                              There are many connections that affect several others if functions disappear.

                              i don't know. everything that has any dependency on nginx might somehow be affected if you hit the restart webgui option on the terminal console

                              1 Reply Last reply Reply Quote 0
                              • johnpoz
                                johnpoz LAYER 8 Global Moderator @RobinH last edited by johnpoz

                                @robinh is your acme client set to restart the webgui?

                                webgui.jpg

                                I don't use acme for my webgui, I just use a signed cert from my own CA for that.. But yeah you kind of need to restart the gui when you change/update the cert.

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 23.01 | Lab VMs CE 2.6, 2.7

                                R 1 Reply Last reply Reply Quote 0
                                • R
                                  RobinH @johnpoz last edited by

                                  @johnpoz When I create a new certificate in Acme it does a restart like this /etc/rc.restart_webgui

                                  johnpoz 1 Reply Last reply Reply Quote 0
                                  • johnpoz
                                    johnpoz LAYER 8 Global Moderator @RobinH last edited by

                                    @robinh what url are you using? I just hit your IP your using talking to the forum with on 443, and that is not an acme cert that gets presented.

                                    Are you using some other port for your webgui other than 443, you say you tested with ssl testing and presented the correct cert?

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 23.01 | Lab VMs CE 2.6, 2.7

                                    R 1 Reply Last reply Reply Quote 0
                                    • R
                                      RobinH @johnpoz last edited by

                                      @johnpoz URL I'm using is: https://fw-01.zafe.se:1443

                                      1 Reply Last reply Reply Quote 0
                                      • johnpoz
                                        johnpoz LAYER 8 Global Moderator @RobinH last edited by johnpoz

                                        @robinh said in URL for WebGUI doesnt work....:

                                        I ran the SSL-test and it shows the correct date for validation.

                                        Not sure how that is possible from the fqdn and port you gave me - you can not do test from ssl testing on custom ports.. Oh on 443 it does present current acme cert.

                                        I resolve that fqdn to a different IP that your talking to the forum on, etc.

                                        But trying to access gives 503 error, something up with the haproxy seeings?

                                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                                        If you get confused: Listen to the Music Play
                                        Please don't Chat/PM me for help, unless mod related
                                        SG-4860 23.01 | Lab VMs CE 2.6, 2.7

                                        R 1 Reply Last reply Reply Quote 0
                                        • R
                                          RobinH @johnpoz last edited by

                                          @johnpoz No, I just ran it without the port. But I get the same date as the one I have in Pfsence?

                                          bba69ee0-753f-4d30-9b23-a9acc1edbdd0-image.png

                                          johnpoz 1 Reply Last reply Reply Quote 0
                                          • johnpoz
                                            johnpoz LAYER 8 Global Moderator @RobinH last edited by

                                            @robinh but that is not your webgui port, so that you ha proxy... Restart your web gui, most likely it didn't restart..

                                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                                            If you get confused: Listen to the Music Play
                                            Please don't Chat/PM me for help, unless mod related
                                            SG-4860 23.01 | Lab VMs CE 2.6, 2.7

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post