Recaptcha will not work on production server

[Will Ferrer]

Hi

We are having an odd issue will not work on our production env.

It is the exact same set up as our other environments, except the production env is multiple boxes behind a load balancer in amazon aws using elastic beanstalk. The other envs are also in elastic beanstalk, but they are just single boxes.

We have tried turning off the "Verify the origin of reCAPTCHA solutions" and it has not fixed the issue.

We also tried adding the domain of the production env into the console with no success. We noticed that the hostname as determined by php while on the box was just an ip address, so we also tried adding all the ip addresses for production to the configuration as well, with no success.

Stranger still, earlier today, only 1 one of our envs would work with "Verify the origin of reCAPTCHA solutions" turned on. Turning it off fixed the other deployments, but turning it back on did not break them again, even after waiting over a half hour for the changes to take effect.

Any advice on how to proceed would be greatly appreciated.

Thank you very much in advance.

Will Ferrer

[Seth Munroe]

You never really described what's not working, but I'll assume it's a success:false response to your validation check.

Make sure you're not sending the client IP in the reCAPTCHA validation request unless you are sure it's actually the client ip that comes into your network. When you're behind a load balancer, the client IP that your web server sees is very likely to be an internal address for your load balancer rather than the actual user's IP address.

That's the only restriction I noticed with my implementation behind a load balancer.

-Seth

[Will Ferrer]

Hi Seth

Thanks very much for the tip.

We had some other pressing things come up so I haven't been attempting to fix this yet. I added some better error reporting, which we haven't deployed to production which will help determine what the exact error message is we are getting from recaptcha. I will update this thread when I get more information to share.

All the best

Will

On Tuesday, August 2, 2016 at 9:11:00 PM UTC-7, Will Ferrer wrote:

[Dusty]

Hi everyone, we are confronted with an issue with Recaptcha V2 here. It is activated in Joomla forms. Our Joomla sits on IIS. Our web server's behind a load balancer. Recaptcha loads up correctly in our forms but when you actually validate forms, you get the following error: "Self-signed certificate found in security chain". We think this is due to the load balancer in front but I'm not very familiar with these things. My colleague in charge of network issues is working with me on this subject.
We're really desperate to get this to work because we use a Joomla component where contact forms can only use Google Recaptcha V2.
Can anyone help?
Buckets of thank you