Problems when using Let's Encrypt

[ghooton]

When I switch over from a self signed cert to a Let’s Encrypt cert Egroupware did not work correctly.
Example, if I try to compose an email the editor pop up box is blank.
I have the following
Debian 8.1
PHP 7.0.24-1~dotdeb+8.1
MySQL (PDO) 5.5.5-10.1.28-MariaDB-1~jessie
Apache/2.4.10 (Debian)

[grefabu]

I’ve the setup with let’s encrypt with two instance without problems.

Did you found anything in the apache logs?
Are you shure the settings in the apache .conf is right?

Bye

Gregor

[ghooton]

Thanks Gregor

I know that this is not a problem with egroupware. What should I look for in the apache config ?

[grefabu]

Have a look how the certs are implementated. Did you use certbot --apache to
write the entrys in the apache .conf?

For let’s encrypt you’ve to use the fullchain:

SSLCertificateFile /etc/letsencrypt/live/mx01.rabadanten.de/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/mx01.rabadanten.de/privkey.pem
Include /etc/letsencrypt/options-ssl-apache.conf

Take a look.

Gregor

[ghooton]

Thanks Gregor, I know this is off topic for this list.

Yes I did use certbot --apache

The only line I did not have in the apache config was

Include /etc/letsencrypt/options-ssl-apache.conf

However this did not solve my problem

[ghooton]

From the apache error log
[Thu Oct 19 19:58:47.876786 2017] [:error] [pid 14391] [client 87.43.255.12:46976] #6 /usr/share/egroupware/api/src/Etemplate/Widget/Nextmatch.php(696): EGroupware\Api\Etemplate\Widget\Nextmatch::get_timestamps(), referer: https://www.scins.ie/egw/index.php?cd=yes
[Thu Oct 19 19:58:47.876790 2017] [:error] [pid 14391] [client 87.43.255.12:46976] #7 /usr/share/egroupware/api/src/Etemplate/Widget/Nextmatch.php(661): EGroupware\Api\Etemplate\Widget\Nextmatch::run_beforeSendToClient(Array), referer: https://www.scins.ie/egw/index.php?cd=yes
[Thu Oct 19 19:58:47.876795 2017] [:error] [pid 14391] [client 87.43.255.12:46976] #8 /usr/share/egroupware/api/src/Etemplate/Widget/Nextmatch.php(363): EGroupware\Api\Etemplate\Widget\Nextmatch::call_get_rows(Array, Array, Array, Object(calendar_uilist), ‘get_rows’, NULL), referer: https://www.scins.ie/egw/index.php?cd=yes
[Thu Oct 19 19:58:47.876799 2017] [:error] [pid 14391] [client 87.43.255.12:46976] #9 [internal function]: EGroupware\Api\Etemplate\Widget\Nextmatch::ajax_get_rows(‘calendar_ghooto…’, Array, Array, NULL, Array, 1508439490), referer: https://www.scins.ie/egw/index.php?cd=yes
[Thu Oct 19 19:58:47.876804 2017] [:error] [pid 14391] [client 87.43.255.12:46976] #10 /usr/share/egroupware/api/src/Json/Request.php(179): call_user_func_array(Array, Array), referer: https://www.scins.ie/egw/index.php?cd=yes
[Thu Oct 19 19:58:47.876808 2017] [:error] [pid 14391] [client 87.43.255.12:46976] #11 /usr/share/egroupware/api/src/Json/Request.php(91): EGroupware\Api\Json\Request->handleRequest(‘EGroupware\\Api\\…’, Array), referer: https://www.scins.ie/egw/index.php?cd=yes
[Thu Oct 19 19:58:47.876812 2017] [:error] [pid 14391] [client 87.43.255.12:46976] #12 /usr/share/egroupware/json.php(119): EGroupware\Api\Json\Request->parseRequest(‘EGroupware\\Api\\…’, ‘{“request”:{"pa…’), referer: https://www.scins.ie/egw/index.php?cd=yes
[Thu Oct 19 19:58:47.876817 2017] [:error] [pid 14391] [client 87.43.255.12:46976] #13 {main}, referer: https://www.scins.ie/egw/index.php?cd=yes
[Thu Oct 19 19:58:47.876825 2017] [:error] [pid 14391] [client 87.43.255.12:46976] # Instance=New, User=ghooton, Request=POST https://www.scins.ie/egw/json.php?menuaction=EGroupware\Api\Etemplate\Widget\Nextmatch::ajax_get_rows, User-agent=Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:56.0) Gecko/20100101 Firefox/56.0, referer: https://www.scins.ie/egw/index.php?cd=yes

[StefanU]

Hi ghotoon,

what do you have in
setup/Edit current configuration/Host information/Enter the host name of the machine on which this server is running:
?

Stefan

[ghooton]

I Have www.scins.ie

[AndreS]

Hi ghooton,
I have another configuration. I have a docker container for let’s encrypt and another container for my egroupware.
Before I did this, I had only a self-signed certififcate, but as far I remember(!), I didn’t change the settings of my configuration.
Here’s my configuration:

André