Content
HTTPS does not work
Added by Yadin Flammer about 9 years ago
The documentation highly recommends using HTTPS, obviously, but it doesn’t work with this product and there are no instructions on how to set it up.
https has been enabled in apache2, works no problem at the default www location. Once you point the configuration to the openproject directory per the openproject.conf (i.e. DocumentRoot /opt/openproject/public), you get a 403 Forbidden on https. http still works fine. Given the includes in the openproject.conf I tried to add those as well to the ssl.conf, but then apache won’t start due to replicated directives.
I did also change the system setting to https in OP itself, which apparently does nothing? Not sure why that option is there when it changes no behaviors at all regardless of connecting by http or https….
I assume people have gotten https to work under apache configs before, so I’m hoping someone can fill in the magic. Clearly the product has special needs outside of a normal configuration, but with no docs on what those are it’s kinds of a dead stick.
Replies (3)
Hi Yadin,
OpenProject does not have special requirements for setting up SSL. Configuration is made solely in your web server and you will not need any specific configuration for OpenProject.
If you use the packaged installation of OpenProject, setting up SSL will require no more than passing CA, certificate and key information to the wizard.
I would recommend using this method if you have difficulties setting up SSL manually.
Best,
Oliver
It’s rather obvious that OpenProject has a LOT of special requirements for setup given the dozens of pages of actions that occur when you do a “reconfigure”, and the unusual configuration of the web files once it’s finished. It seems that is the only way to actually get it behind https, it can’t be done manually, at least not without pages of missing documentation.
The good news is that a reconfigure works brilliantly and was a lot quicker and easier than even a normal ssl configuration for a site. Once complete, it auto pushes to https and everything, very nice.
Hello,
I am encountering same problem and regardless of reconfigure many times, accessing my domain will always show up Forbidden 403 error. My openproject is installed at /opt/openproject/public with user and group openproject:openproject. On some forums I found that this issue can be resolved by changing user to www-data and also mod to 755. I tried both but changing it to 755 starts showing the directory listing.
Any help will be highly appreciated.
Regards,
Danish