Problem with https

[Do Le Vu]

Hello,

I've installed BBB, and it works well if I don't enable https.

After following the guide here to turn on https http://docs.bigbluebutton.org/install/install.html#configure-bigbluebutton-to-load-session-via-https
It shows this problem when I joining to the demo api site

"

This page contains the following errors:

error on line 1 at column 153: Extra content at the end of the document

Below is a rendering of the page up to the first error.

"

If I undo the changes, and use http version, it still works well. After testing step by step, I found out after this step, it will have problem
"

Edit the file /var/lib/tomcat7/webapps/bigbluebutton/WEB-INF/classes/bigbluebutton.properties and update the property bigbluebutton.web.serverURL to use https:

#----------------------------------------------------
# This URL is where the BBB client is accessible. When a user sucessfully
# enters a name and password, she is redirected here to load the client.
bigbluebutton.web.serverURL=https://bigbluebutton.example.com

"

How can I fix it?

Thanks,
Vu

[Do Le Vu]

Anyone can help me? I reinstalled the server twice, but the same problem

[Chad Pilkey]

Did you follow all of the steps to set up HTTPS from this point forward? If you have followed the steps from the start, what do you get when you try to load "https://yourserver.com/bigbluebutton/api"? Finally, what is the result of "bbb-conf --check"?

[Do Le Vu]

Yes, I followed all steps, and reinstalled the server twice to try.

When I try to load https://yourserver.com/bigbluebutton/api, it says "Success"

The result of bbb-conf --check that I remember:
1. It says the IP doesn't match, the IP in ifconfig is xxx.xxx.xxx.xxx but the IP from files is bbb.myserver.com
2. It says that it can't load https://bbb.myserver.com/default.pdf
Bu when I visit https://bbb.myserver.com/default.pdf it still loads

Thanks,
Vu

[Chad Pilkey]

Can you paste the full results of the --check command rather then an abridged version. From your server, paste back the output of "wget https://yourserver.com/bigbluebutton/api" and if that returns a 200 code, paste back the result of "wget https://yourserver.com/bigbluebutton/api -O - --quiet"

[Do Le Vu]

Hi Chad,

I will update the answer tomorrow.
Users are using this BBB instance without https.
I will setup a new server and post the result soon

Thanks,
Vu

[asayaq ayawer]

hi chad

i have the same problem

this is the full results of the --check

 bbb-conf --check

BigBlueButton Server 0.9.1 (361)
                    Kernel version: 3.16.0-49-generic
                      Distribution: Ubuntu 14.04.3 LTS (64-bit)
                            Memory: 7781 MB

/var/www/bigbluebutton/client/conf/config.xml (bbb-client)
          Port test (tunnel): 192.168.2.102
                              Red5: 192.168.2.102
              useWebrtcIfAvailable: true

/opt/freeswitch/conf/sip_profiles/external.xml (FreeSWITCH)
                    websocket port: 7443
                    WebRTC enabled: true

/etc/nginx/sites-available/bigbluebutton (nginx)
                       server name: 192.168.2.102
                              port: 443 ssl spdy # support SPDY
                    bbb-client dir: /var/www/bigbluebutton

/var/lib/tomcat7/webapps/bigbluebutton/WEB-INF/classes/bigbluebutton.properties (bbb-web)
                      bbb-web host: 192.168.2.102

/var/lib/tomcat7/webapps/demo/bbb_api_conf.jsp (API demos)
                           api url: 192.168.2.102

/usr/share/red5/webapps/bigbluebutton/WEB-INF/red5-web.xml (red5)
                  voice conference: FreeSWITCH
                     capture video: true
                   capture desktop: true

/usr/local/bigbluebutton/core/scripts/bigbluebutton.yml (record and playback)
                     playback host: 192.168.2.102


** Potential problems described below **
# Warning: The installed ffmpeg version 'git-2015-09-13-d13a2df' is not supported
#          Recording processing may not function correctly

# Warning: The API demos are installed and accessible from:
#
#    https://192.168.2.102/
#
# These API demos allow anyone to access your server without authentication
# to create/manage meetings and recordings. They are for testing purposes only.
# If you are running a production system, remove them by running:
#
#    sudo apt-get purge bbb-demo




and this is the result when calling wget https://192.168.2.102/bigbluebutton/api

--2015-09-22 23:04:05--  https://192.168.2.102/bigbluebutton/api
Connecting to 192.168.2.102:443... connected.
ERROR: cannot verify 192.168.2.102's certificate, issued by ‘/C=XX/ST=XXX/L=XXXXXXX/O=Ronex exopex/OU=raidation murlex/CN=192.168.2.102/emailAddress=ro...@exopex-baralax.XX’:
  Self-signed certificate encountered.
To connect to 192.168.2.102 insecurely, use `--no-check-certificate'.




when calling wget https://192.168.2.102/bigbluebutton/api -O - --quiet
 no result


thank you for your help

[Chad Pilkey]

Asayaq,

It looks like your issue is that you are using a self-signed certificate which will likely cause you issues because it will be rejected as invalid. You could try installing the certificate on your host OS as well as on your BBB VM for testing purposes so that your browser will accept the certificate.

I don't know if this is the same issue that Vu is experiencing though because they are getting different error messages from the --check command.

ERROR: cannot verify 192.168.2.102's certificate, issued by ‘/C=XX/ST=XXX/L=XXXXXXX/O=Ronex exopex/OU=raidation murlex/CN=192.168.2.102/emailAddress=ronex@exopex-baralax.XX’:

[asayaq ayawer]

hi chad

thank you for helping me

best regards