Showvoc https SSL configuration

[Rajesh Patavardhan]

Hello,

I am trying to setup showvoc to run in https with SSL. Can anybody help. 

I have made the following settings

 1/ In the config\application.yml, 

                   server.port: 443

2) Put the .cer and .key files in the config\saml folder

3) In the saml/application.yml

spring.security.saml2.relyingparty.registration.st_saml:
  base-url: "https://cbv.cwr.wto.org"
  redirect-url: "https://cbv.cwr.wto.org/showvoc/#"
# identityprovider.metadata-location: "file:./config/saml/idp-metadata.xml"
  signing:
    credentials:
      - private-key-location: "file:./config/saml/private.key"
        certificate-location: "file:./config/saml/public.cer"

4)  Calling http://cbv.cwr.wto.org:443/showvoc  correctly resolves the IP and I get the webpage and works correctly

5) https://cbv.cwr.wto.org/showvoc does not work and I get

ERR_SSL_PROTOCOL_ERROR

6) On server log 

java.lang.IllegalArgumentException: Invalid character found in method name [0x160x030x010x060xd80x010x000x060xd40x030x030x950xf6q0xbd0x87<0xb8T0x990x05[0xb10x900x0c0xa7F0xddm0xd60x83X0xac0x810x1bk0xfbp{0xef0xb5W0xc6 ]. HTTP method names must be tokens

Thanks,

Rajesh

[Manuel Fiorelli]

Hi Rajesh,

We usually set up SSL through a reverse proxy such as Nginx or Apache HTTPD, both of which integrate nicely with Certbot to automate the issuance and renewal of Let’s Encrypt certificates.

You can use the same proxies even if your certificates are issued by another CA and need to be installed manually.

It looks like you can configure a Spring Boot application (for example, VocBench) to use HTTPS natively—without a reverse proxy. However, in your application.yaml you ended up using SAML-related properties, which define on a separate certificate/key pair.
You can find the required properties to enable SSL in Spring Boot here:

https://docs.spring.io/spring-boot/how-to/webserver.html#howto.webserver.configure-ssl

In addition to what stated in the reference, you might consider to add also the following property value:

server.ssl.enabled: true

Best regards,

Manuel.

--
You received this message because you are subscribed to the Google Groups "vocbench-user" group.
To unsubscribe from this group and stop receiving emails from it, send an email to vocbench-use...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/vocbench-user/acf6a353-5935-4f6f-b002-e421cc78d6f4n%40googlegroups.com.

--

Manuel Fiorelli

[Rajesh Patavardhan]

Dear Manuel, 

Thank you very much, this worked and saved my day! I truly appreciate your time and this user community. 

I used the SSL configuration within Spring Boot as below

config/application.yml

server:
  port: 443
  ssl:
    enabled: true
    certificate: "file:./config/public.cer"
    certificate-private-key: "file:./config/private.key"
    trust-certificate: "file:./config/public.cer"

Best regards,

Rajesh