Problems logging in with HTTPS - moodle

[timbo343]

I have set up moodle 1.8.4+ on a server, put it in our DMZ and to find that the HTTPS logons dont work, even though they work fine on the internal network. Browsing to the home page isnt a problem, as that part of the site is in http but as soon as you click on the login button the site changes to https and the page will not load. Have I correctly installed the certificates, as like i said, the login works ok on the internal network?

 

Any ideas?

 

Tim

[Jona]

two idea, we havn't tried to implement https yet so don't know too much:

 

1) Have you opened the appropriate ports (usually 443 as well as 80) and also re-bound the apache/IIS if your using a new IP?

 

2) Is your certificate bound to an internal address rather than your DMZ or external address. If your using a perticularly paranoid browser this could be breaking with out telling you....

 

Cheers

Jona

[timbo343]

1. I think these ports should be open anyway. But i have heard that if you are running apache and IIS together then there can be problems but i dunno how to fix that..

 

2. How do you check to see if the certificates are bound for an internal address?

 

PS... im pretty new to this kinda thing.

[Geoff]

Is the server running IIS or apache?

[timbo343]

Apache is the webserver but you also need to run IIS and certificate services for the LDAPS and HTTPS to run.

[Jona]

That dosn't sound quite right. You should be able to use mod_ssl to run your secure stuff. Whats your rational for using IIS on the same machine, or this something in the windows world I don't know about?

 

I know we definatly have tested moodle using SSL without IIS installed, I don't know about LDAPS though....

 

Cheers

Jona

[Geoff]

I agree, there is no need to use IIS for HTTPS.

[apeo]

Agree, dont need IIS just for that.. in fact our webserver runs apache/moodle without the need of IIS. Having said that i dont think the problem is related to the way Apache/IIS setup as it works internally right? I would be inclined to think its another issue such as certificate issue or routing. What is the domain the certificate is bound to?

[Jona]

What Apeo said is possible, however I'd be inclined to disable one of your webservers first, otherwise they could be fighting on ports or for file locks, or all kinds of nasty stuff. Apache & IIS don't share the same internal processes because they are completly different services (analgious to Word vs. OpenOffice).

 

If your going to use apache you need to make sure you have mod_ssl, etc installed.

 

Lots of how-to's on google, if your using a pre-packaged WAMP stack it might be as easy as uncommenting it in httpd.conf

http://docs.moodle.org/en/Apache#SSL

http://www.neilstuff.com/apache/apache2-ssl-windows.htm

http://tud.at/programm/apache-ssl-win32-howto.php3

[DarkLight]

Use either IIS or Apache, it doesn't really matter as PHP, Moodle, MySQL and SSL support either web server.

 

LDAPS will require OpenLDAP or the PHP LDAP extension to be installed on the machine and loaded on the machine - depending on the web server. LDAPS can be a pain to setup sometimes, but it doesn't sound like your problem.

 

Is error logging and reporting turned on? If not, try turning it on and seeing what the error is - if any. As others have said it may be a browser issue; or could just be something else entirely.

 

Best Regards,

[timbo343]

cheers. Ill give all those a go

 

Thanks