Top Menu

Jump to content
Home
    Modules
      • Projects
      • Activity
      • Work packages
      • Gantt charts
      • Calendars
      • Team planners
      • Boards
      • News
    • Getting started
    • Introduction video
      Welcome to OpenProject Community
      Get a quick overview of project management and team collaboration with OpenProject. You can restart this video from the help menu.
    • Help and support
    • User guides
    • Videos
    • Shortcuts
    • Community forum
    • Enterprise support
    • Additional resources
    • Data privacy and security policy
    • Digital accessibility (DE)
    • OpenProject website
    • Security alerts / Newsletter
    • OpenProject blog
    • Release notes
    • Report a bug
    • Development roadmap
    • Add and edit translations
    • API documentation
  • Sign in
      Forgot your password?

      or sign in with your existing account

      Google

Side Menu

  • Overview
  • Activity
    Activity
  • Roadmap
  • Work packages
    Work packages
  • Gantt charts
    Gantt charts
  • Calendars
    Calendars
  • Team planners
    Team planners
  • Boards
    Boards
  • News
  • Forums
  • Feature tour
    Feature tour

Content

You are here:
  1. Forums
  2. General discussion

Reconfigure OpenProject CE to use HTTPS instead of HTTP

Added by Riccardo Mollo almost 6 years ago

Hello guys,

I'm running OpenProject CE 8.2.0 on Debian 9 (Stretch).

At the moment it's only using plain HTTP, but now I need to configure HTTPS. I already have all the files I need (certificate, key, CA).

I cannot find a good and detailed guide that explains what are the steps needed (eg: where do I have to copy the certificate files) to switch OpenProject from HTTP to HTTPS only.

Coud anyone be so kind to give me a hand?

Thanks in advance,

Riccardo


Replies (3)

RE: Reconfigure OpenProject CE to use HTTPS instead of HTTP - Added by Hayley IT almost 6 years ago

Hi Riccardo,

I may be wrong here, as we have only just installed OP, but we have deployed ours behind an Apache reverse proxy, which provides the SSL.

With that said, I would suggest that you just need to secure the site in Apache's config for the virtualhost. The cert files etc can go anywhere on your linux box - you just have to reference them in the virtualhost config.

I think the only thing needed to be configured within OP itself, is the option under System settings >> General >> Protocol

RE: Reconfigure OpenProject CE to use HTTPS instead of HTTP - Added by Riccardo Mollo almost 6 years ago

Hi Hayley,

thanks for your kind reply. Is was much easier than I thought.

I post my solution so that it might be helpful to other users.

Edit /etc/apache2/sites-available/openproject.conf with the following content (change mydomain.com etc. with your real domain)

Include /etc/openproject/addons/apache2/includes/server/*.conf

<VirtualHost *:80>
  ServerName openproject.mydomain.com
  Redirect / https://openproject.mydomain.com/
</VirtualHost>

<VirtualHost *:443>
  SSLEngine On
  SSLCACertificateFile /etc/ssl/certs/ca-mydomain.com.crt
  SSLCertificateFile /etc/ssl/certs/openproject.mydomain.com.pem
  SSLCertificateKeyFile /etc/ssl/private/openproject.mydomain.com.key

  ServerName openproject.mydomain.com
  ServerAdmin root@mydomain.com

  DocumentRoot /opt/openproject/public

  ProxyRequests off

  Include /etc/openproject/addons/apache2/includes/vhost/*.conf

  # Can't use Location block since it would overshadow all the other proxypass directives on CentOS
  ProxyPass / http://127.0.0.1:6000/ retry=0
  ProxyPassReverse / http://127.0.0.1:6000/
</VirtualHost>

then restart Apache.

Now open your OpenProject with HTTPS (or HTTP, it will redirect automatically to HTTPS), login as Administrator and change the following:

Administration -> System Settings -> Protocol to "HTTPS"

Thanks, bye!

Riccardo

RE: Reconfigure OpenProject CE to use HTTPS instead of HTTP - Added by Jason Morrill over 4 years ago

I realize this is an old topic but I've encountered a problem with putting an Apache proxy server in front of OpenProject. There are certain parts of the Open Project GUI where the URL changes from the originally requested one to the proxied URL.

For example:

The URL as entered is HTTPS://op.mydomain.com

Which hits the Apache proxy server, and redirects to HTTP://op.mydomain.com:8000

That's fine, but now some of the links in the OpenProject GUI reference the original URL and others reference the URL with the port. For example:

The "select a project" link in the upper-left has the correct URL

The "my account" link has the URL with the port - which is not the desired link

  • (1 - 3/3)
Loading...