Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Bugzilla with SSL

482 views
Skip to first unread message

Idelson, Gil

unread,
Mar 5, 2015, 8:47:08 AM3/5/15
to support-...@lists.mozilla.org
I want to enable SSL in Bugzilla
I configured my apache server and create self signed certificate as explained in various websites
I.E http://rubayathasan.com/tutorial/apache-ssl-on-windows/

In Bugzilla , I set "redirect_ssl" to '1' and ssl_base to my normal address by with https instead of http

In addition , I insert my certificate into the trusted list of windows

Nevertheless , I cant access my server and I get HTTP 403 error
"Forbidden
You don't have permission to access / on this server.
"

Can someone help me?


best regards ,
Gil Idelson

Thorsten Schöning

unread,
Mar 5, 2015, 9:06:59 AM3/5/15
to support-...@lists.mozilla.org
Guten Tag Idelson, Gil,
am Donnerstag, 5. März 2015 um 14:45 schrieben Sie:

> Nevertheless , I cant access my server and I get HTTP 403 error
> "Forbidden
> You don't have permission to access / on this server.
> "

Your HTTPS configuration for Bugzilla in Apache is wrong, you need the
exact same settings. The easiest to test would be to simply change
your current Bugzilla related VHOST to listen on :443.

Mit freundlichen Grüßen,

Thorsten Schöning

--
Thorsten Schöning E-Mail: Thorsten....@AM-SoFT.de
AM-SoFT IT-Systeme http://www.AM-SoFT.de/

Telefon...........05151- 9468- 55
Fax...............05151- 9468- 88
Mobil..............0178-8 9468- 04

AM-SoFT GmbH IT-Systeme, Brandenburger Str. 7c, 31789 Hameln
AG Hannover HRB 207 694 - Geschäftsführer: Andreas Muchow

Idelson, Gil

unread,
Mar 5, 2015, 9:43:18 AM3/5/15
to Thorsten Schöning, support-...@lists.mozilla.org
Thank you on the quick answer

Could you please elaborate your answer?

What do you mean by wrong configuration?
What I need to change?
I can't change the LISTEN in httpd.conf to 443...


best regards ,
Gil Idelson


-----Original Message-----
From: support-bugzilla [mailto:support-bugzilla-bounces+gidelson=micros...@lists.mozilla.org] On Behalf Of Thorsten Sch?ning
Sent: Thursday, March 05, 2015 4:06 PM
To: support-...@lists.mozilla.org
Subject: Re: Bugzilla with SSL

EXTERNAL EMAIL
_______________________________________________
support-bugzilla mailing list
support-...@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-bugzilla
PLEASE put support-...@lists.mozilla.org in the To: field when you reply.

Thorsten Schöning

unread,
Mar 5, 2015, 9:56:47 AM3/5/15
to support-...@lists.mozilla.org
Guten Tag Idelson, Gil,
am Donnerstag, 5. März 2015 um 15:41 schrieben Sie:

> What do you mean by wrong configuration?
> What I need to change?

You need at least the exact same configuration like you already have
for your Bugzilla, only additionally with HTTPS. Just copy the
statements to the new VHOST you created or add the SSL config to your
current Bugzilla VHOST or such.

> I can't change the LISTEN in httpd.conf to 443...

So you are calling https://bugzilla.example.org:80 or what? Maybe it's
better if your provide your old and new config, maybe even with a
diff.

Idelson, Gil

unread,
Mar 5, 2015, 10:16:26 AM3/5/15
to Thorsten Schöning, support-...@lists.mozilla.org
I followed the instructions in the website I mention

The only changes I made in the httpd.conf are:
1. LoadModule mod_ssl.so
2. include conf/extra/httpd-ssl.conf

In httpd-ssl.conf I verify all the default value are according to I set in httpd.conf
httpd-ssl listen to 443 (the default)
also I opened the TCP port 443 in the firewall

I tried to access https://example_name/ with no luck

best regards ,
Gil Idelson


-----Original Message-----
From: support-bugzilla [mailto:support-bugzilla-bounces+gidelson=micros...@lists.mozilla.org] On Behalf Of Thorsten Sch?ning
Sent: Thursday, March 05, 2015 4:55 PM
To: support-...@lists.mozilla.org
Subject: Re: Bugzilla with SSL

EXTERNAL EMAIL


Thorsten Schöning

unread,
Mar 5, 2015, 10:34:35 AM3/5/15
to support-...@lists.mozilla.org
Guten Tag Idelson, Gil,
am Donnerstag, 5. März 2015 um 16:14 schrieben Sie:

> In httpd-ssl.conf I verify all the default value are according to I set in httpd.conf

You need to make sure that all the values you changed for Bugzilla are
in place as well. And obviously they aren't, else it would work. You
need the same configuration for Bugzilla with and without HTTPS.

Idelson, Gil

unread,
Mar 8, 2015, 3:46:27 AM3/8/15
to Thorsten Schöning, support-...@lists.mozilla.org
Thanks for the help
The problem was name of the virtual host that was different from the server name
Now it works

best regards ,
Gil Idelson
RT/Embedded SW Engineer
Microsemi Corporation - POE BU
1 Hanagar St. P.O.Box 7220
Hod Hasharon, 4501305, Israel
Phone:  +972-9-7755100 Ext 271
Fax:        +972-9-7755111


-----Original Message-----
From: support-bugzilla [mailto:support-bugzilla-bounces+gidelson=micros...@lists.mozilla.org] On Behalf Of Thorsten Sch?ning
Sent: Thursday, March 05, 2015 5:33 PM
To: support-...@lists.mozilla.org
Subject: Re: Bugzilla with SSL

EXTERNAL EMAIL


0 new messages