Content

Reconfigure OpenProject CE to use HTTPS instead of HTTP

Added by Riccardo Mollo over 6 years ago

Hello guys,

I'm running OpenProject CE 8.2.0 on Debian 9 (Stretch).

At the moment it's only using plain HTTP, but now I need to configure HTTPS. I already have all the files I need (certificate, key, CA).

I cannot find a good and detailed guide that explains what are the steps needed (eg: where do I have to copy the certificate files) to switch OpenProject from HTTP to HTTPS only.

Coud anyone be so kind to give me a hand?

Thanks in advance,

Riccardo

Replies (3)

RE: Reconfigure OpenProject CE to use HTTPS instead of HTTP - Added by Hayley IT over 6 years ago

Hi Riccardo,

I may be wrong here, as we have only just installed OP, but we have deployed ours behind an Apache reverse proxy, which provides the SSL.

With that said, I would suggest that you just need to secure the site in Apache's config for the virtualhost. The cert files etc can go anywhere on your linux box - you just have to reference them in the virtualhost config.

I think the only thing needed to be configured within OP itself, is the option under System settings >> General >> Protocol

RE: Reconfigure OpenProject CE to use HTTPS instead of HTTP - Added by Riccardo Mollo over 6 years ago

Hi Hayley,

thanks for your kind reply. Is was much easier than I thought.

I post my solution so that it might be helpful to other users.

Edit /etc/apache2/sites-available/openproject.conf with the following content (change mydomain.com etc. with your real domain)

Include /etc/openproject/addons/apache2/includes/server/*.conf

<VirtualHost *:80>
  ServerName openproject.mydomain.com
  Redirect / https://openproject.mydomain.com/
</VirtualHost>

<VirtualHost *:443>
  SSLEngine On
  SSLCACertificateFile /etc/ssl/certs/ca-mydomain.com.crt
  SSLCertificateFile /etc/ssl/certs/openproject.mydomain.com.pem
  SSLCertificateKeyFile /etc/ssl/private/openproject.mydomain.com.key

  ServerName openproject.mydomain.com
  ServerAdmin root@mydomain.com

  DocumentRoot /opt/openproject/public

  ProxyRequests off

  Include /etc/openproject/addons/apache2/includes/vhost/*.conf

  # Can't use Location block since it would overshadow all the other proxypass directives on CentOS
  ProxyPass / http://127.0.0.1:6000/ retry=0
  ProxyPassReverse / http://127.0.0.1:6000/
</VirtualHost>

then restart Apache.

Now open your OpenProject with HTTPS (or HTTP, it will redirect automatically to HTTPS), login as Administrator and change the following:

Administration -> System Settings -> Protocol to "HTTPS"

Thanks, bye!

Riccardo

RE: Reconfigure OpenProject CE to use HTTPS instead of HTTP - Added by Jason Morrill over 5 years ago

I realize this is an old topic but I've encountered a problem with putting an Apache proxy server in front of OpenProject. There are certain parts of the Open Project GUI where the URL changes from the originally requested one to the proxied URL.

For example:

The URL as entered is HTTPS://op.mydomain.com

Which hits the Apache proxy server, and redirects to HTTP://op.mydomain.com:8000

That's fine, but now some of the links in the OpenProject GUI reference the original URL and others reference the URL with the port. For example:

The "select a project" link in the upper-left has the correct URL

The "my account" link has the URL with the port - which is not the desired link

Top Menu

Side Menu