Locations other than `openmeetings` required for version 4.0.x only and can
be dropped for 5.0.0
(`<Location /open>` ... etc.)

Described here
https://stackoverflow.com/questions/51721771/apache-openmeetings-4-0-4-csrf-attack-when-using-apache2-as-proxypass

On Sun, 29 Mar 2020 at 04:37, Marcus Schulz <m...@polarnetworks.de> wrote:

> Hi Orm,
>
>
> here is a working  example for Apache webserver. You need the WebSockets
> to be rewritten.
> Expecteing the tomcat of your openmeeting installation running in port
> 5080 @ localhost.
> If your apache is configured for ssl, be sure to add scheme and security
> to your tomcat connector:
>
>  <Connector port="5080" protocol="HTTP/1.1"
>                connectionTimeout="20000"
>                redirectPort="5443" *secure="true" scheme="https"*/>
>
>
> Apache fragment for vhost:
> ###      OpenMeetings    ###
> ## Custom fragment
> RewriteEngine On
> RewriteCond %{REQUEST_URI} ^/$
> RewriteRule (.*) /openmeetings/ [R=301]
> RewriteCond %{HTTP:Connection} Upgrade [NC]
> RewriteCond %{HTTP:Upgrade} websocket [NC]
> RewriteRule /(.*) ws://localhost:5080/$1 [P,L]
> RedirectMatch ^/$ https://yourservername.de/openmeetings
> ProxyPreserveHost On
>
> <Location /openmeetings>
>   Require all granted
>   ProxyPass http://localhost:5080/openmeetings
>   ProxyPassReverse http://localhost:5080/openmeetings
>   RewriteEngine On
>   RewriteRule ^/(.*) http://localhost:5080/$1 [P]
> </Location>
> <Location /open>
>   Require all granted
>   ProxyPass http://localhost:5080/open
>   ProxyPassReverse http://localhost:5080/open
> </Location>
> <Location /send>
>   Require all granted
>   ProxyPass http://localhost:5080/send
>   ProxyPassReverse http://localhost:5080/send
> </Location>
> <Location /idle>
>   Require all granted
>   ProxyPass http://localhost:5080/idle
>   ProxyPassReverse http://localhost:5080/idle
> </Location>
> <Location /close>
>   Require all granted
>   ProxyPass http://localhost:5080/close
>   ProxyPassReverse http://localhost:5080/close
> </Location>
>
> Hope, that helps.
>
>
> Am 28.03.2020 um 17:32 schrieb Orm Finnendahl:
>
> Hi,
>
>  we successfully installed openmeetings on our server but have some
> issues regarding virtual host settings in the apache config. Are there
> any exampe files?
>
> Using our vpn and accessing it using the vpn local ip works like this:
> https://10.8.0.11:5443/openmeetings/
>
> Below is our entry in the apache config to make it accessible using
> https://<our-domain-omitted>/openmeetings
>
> We get "The requested URL was not found on this server"
>
> Any help is appreciated.
>
> --
> Orm
>
> VirtualHost *:443>
>         ServerName <our-domain-omitted>
>         SSLEngine On
>         SSLCertificateFile    /etc/apache2/certs/www.mydomain.com.pem
>         SSLCertificateKeyFile /etc/apache2/certs/www.mydomain.com.key
>
>         SSLCACertificatePath /etc/ssl/certs/
>
>
>         RewriteEngine Off
>
>         ProxyRequests Off
>         SetEnv proxy-nokeepalive 1
>         ProxyPreserveHost On
>         ProxyPassInterpolateEnv On
>         ProxyPass /openmeetings http://127.0.0.1:5080/openmeetings interpolate
>
>         <Location />
>                 Order allow,deny
>                 Allow from all
>         </Location>
>
>         <Proxy http://127.0.0.1:5080>
>                 RequestHeader set "x-webobjects-server-port" "443"
>                 RequestHeader set "x-webobjects-server-name" 
> "mydomain.com:8800"
>                 RequestHeader set "x-webobjects-server-url" 
> "https://mydomain.com:8800"; <https://mydomain.com:8800>
>                 RequestHeader set "x-webobjects-server-protocol" "HTTP/1.0"
>                 RequestHeader set "x-webobjects-remote-host" "127.0.0.1"
>                 AddDefaultCharset UTF-8
>         </Proxy>
>
>         ErrorLog /var/log/apache2/om-error.log
>         CustomLog /var/log/apache2/om-access.log combined
>
> </VirtualHost>
>
>
>

-- 
WBR
Maxim aka solomax

Reply via email to