BigBlueButton Canvas LTI integration over HTTPS

[Ghid Pitesti]

Hello,

I dont know if i am gonna be very concise in this very first post in this group regarding BBB Server.

So, the story is quite simple. I fired up two boxes running ubuntu 16.04 on GCP. One running Canvas LMS and one obviously running BigBlueButton Server.

Set up LetsEncrypt certs on both servers and running smoothly on HTTPS. Verified by SSLLabs and got A+ for Canvas LMS server and A for BBB server.

Installed LTI on BBB server and defined an module on Canvas LMS. Everything seems to work fine but when the module opens it gives me the warning:

You are trying to launch insecure content from within a secure site (canvas). Some web browsers may prevent this content from loading.

It looks like your content might not load. You can use this button to try launching it in a new tab.

So i added the forward header rule 

proxy_set_header   X-Forwarded-Proto $scheme;

in lti.nginx config file

But i still have the same result. 

When i type bbb-conf --lti, i get the following result

       URL: http://bbb.vpscode.com/lti/tool

  Customer: bbb

    Secret: welcome

  Icon URL: http://bbb.vpscode.com/lti/images/icon.ico

So, how do i change the Lti URL from http to https in order to avoid the warning message listed above with red color.

Tnx.

[Chad Pilkey]

When you enter the BBB LTI information in Canvas I'm pretty sure you can just change the "http" to "https". Like, "https://bbb.vpscode.com/lti/tool". I would also suggest changing your customer and secret if those are your real values.

[Ghid Pitesti]

The credentials for lti were changed no worries.

But where do I find http://bbb.vpscode.com/lti/tool to add https in /var/lib/tomcat7/webapps/lti/WEB-INF/classes/lti-config.properties, since this is the config file we are talking about?

[Ghid Pitesti]

Oh, and sorry I just wasn't paying attention to your answer carefully. In the canvas lti module the url is set to https from the very beginning but I still get the warning.

[Chad Pilkey]

After making the change to lti.nginx did you restart nignx? You can run "bbb-conf --clean" to restart everything or "sudo systemctl restart nginx" to just restart nginx.

[Ghid Pitesti]

Yap I did it couple of times. Still nothing! Some elusive setting for ssl headers to be passed to nginx correctly.

[Chad Pilkey]

We're past my debugging ability, sorry. I know that it can work I'm just not sure where to go about digging into why it isn't working for you.

[Fred Dixon]

Hi Ghid,

In /var/lib/tomcat7/webapps/lti/WEB-INF/classes/lti-config.properties, what is the value for bigbluebuttonURL?  It should have an 'https://' in the URL, such as

   bigbluebuttonURL=https://my.server.com/bigbluebutton

Regards,... Fred

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsub...@googlegroups.com.
To post to this group, send email to bigbluebutton-setup@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.

--

BigBlueButton Developer

http://bigbluebutton.org/

@bigbluebutton

[Ghid Pitesti]

Yes, the value is https, I double checked it.

[Ghid Pitesti]

Anybody... Any ideas?

[Fred Dixon]

Hi Ghid,

> Installed LTI on BBB server and defined an module on Canvas LMS. Everything seems to work fine but when the module opens it gives me the warning:

Use the built-in developer tools in your browser to see the network traffic.  It should show you the HTTP (not HTTPS) URL that is triggering the warning in the browser.

Regards,... Fred

On Tue, Feb 27, 2018 at 6:17 AM, Ghid Pitesti <equ...@gmail.com> wrote:

Anybody... Any ideas?

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsub...@googlegroups.com.
To post to this group, send email to bigbluebutton-setup@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.