The config is made and optimized for a deplyoment in a "real"
environment, the docker setup is provided for a quick evaluation and NOT
meant for production use (at least not without adequate modifications)
therefore this redirects to the usually expected HTTPS port.
If you want to run this in docker, you can of course change the redirect
rule in the config to work as expected.
Oliver
On 15.06.22 11:04, Bernd Krietenstein wrote:
Hi Oliver,
thanks for the quick reply. Just a remark: shouldn't the redirect point to
"https://openxpkihost:8443"; ?
Viele Grüße,
BERND
Software Development
14DS3 Software Platform III
Corporate R&D
-----Original Message-----
From: Oliver Welter <m...@oliwel.de>
Sent: Wednesday, June 15, 2022 9:31 AM
To: openxpki-users@lists.sourceforge.net
Subject: *EXT* [Newsletter] Re: [OpenXPKI-users] Getting 301 Redirect from
SCEP-Server (docker)
Hi Bernd,
the SCEP Endpoint needs an URI path /scep/<endpoint> name, the root document is
redirected to the "users" webui for convenience and not served.
Oliver
On 15.06.22 09:04, Bernd Krietenstein wrote:
Hi,
I followed the documentation to get the openxpki docker running. According to
the docs, these 3 steps should be sufficient to get the SCEP server running
with docker:
1. git clone https://github.com/openxpki/openxpki-config.git
--single-branch --branch=community 2. cp contrib/wait_on_init.yaml
openxpki-config/config.d/system/local.yaml
3. docker-compose up
But I can't reach the SCEP server on http://openxpkihost:8080. The wireshark
protocol shows, that the SCEP server answers with a 301 Redirect to the same
port:
GET /?operation=GetCACert HTTP/1.1
accept: */*
host: openxpkihost:8080
HTTP/1.1 301 Moved Permanently
Date: Tue, 14 Jun 2022 14:06:53 GMT
Server: Apache
Location: https://openxpkihost:8080?operation=GetCACert
Content-Length: 251
Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a
href="https://openxpkihost:8080?operation=GetCACert";>here</a>.</p>
</body></html>
The redirect to HTTPS on the same port looks wrong. Is this a misconfiguration
of the Apache server? Do I overlook something here?
However, the WebGUI on port 8443 works.
Thanks for any hints,
BERND KRIETENSTEIN
Software Development
14DS3 Software Platform III
Corporate R&D
_______________________________________________
OpenXPKI-users mailing list
OpenXPKI-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openxpki-users
--
Protect your environment - close windows and adopt a penguin!
_______________________________________________
OpenXPKI-users mailing list
OpenXPKI-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openxpki-users
_______________________________________________
OpenXPKI-users mailing list
OpenXPKI-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openxpki-users
--
Protect your environment - close windows and adopt a penguin!
_______________________________________________
OpenXPKI-users mailing list
OpenXPKI-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openxpki-users
