Geoserver over HTTPS - iis

I posted this question on gis.stackexchange (gis.stackexchange.com/questions/383728/geoserver-over-https) but they closed it considering off-topic... (it seems that geoserver and WMS are not gis questions...)
Anyway, I installed GeoServer 2.18.1 on a windows 2008 server with IIS7. On layer preview I can see my layers on OpenLayers, so everything is ok. The URL of the preview is (http)mysite.com:8080/geoserver/tiger/wms?service=WMS (etc).
I need to use GeoServer over HTTPS on a PHP website, so I did:
installed HTTPS certificate on IIS
on geoserver, under global settings, added "(https)mysite.com:8080/geoserver" to Proxy Base URL
But now, when I preview the same layer I see a blank map. Using inspector I found an error on the request URL: SSL_ERROR_RX_RECORD_TOO_LONG
So, GeoServer WMS works ok over HTTP but not over HTTPS.
I found some related posts but they use other configuration like tomcat/apache/other, mine uses windows server/IIS/JRE/geoserver.
Any idea? Did I miss any configuration?

I am not an expert, from my recent experience deploying a GeoServer.
Geoserver runs on port:8080 (not secure) so the request has to be proxied on this port
You have to set up a reverse proxy server using IIS
I can not help you further, I have done recently this by using apache.

Related

Issue Setting up IIS URL Rewrite Rule --> ARR

Hey everyone it's been a while since I've messed with IIS and I've been asked to implement some changes. (I'm more of a GIS guys then a web admin)
We have a web server humming along at https://my.work.com/
A solution just got deployed to 192.168.1.1:1234/iv
I've verified that the web server can talk to the application server over the correct port and I have a server farm set up in IIS. Our team and clients need to be able to access the solution at https://my.work.com/iv
I'm hitting a wall in setting up my URL rewrite correctly since I'm not 100% sure what the incoming pattern and outgoing path should be. Any help would be appreciated.
IIS Screenshot

Setting SonarQube for SSL using IIS and Reverse Proxy throws 502 error

I am trying to setup SonarQube with SSL on Windows Server 2019. I can access the SonarQube server locally on the server using http://localhost:9000.
I followed the exact steps as outlined here to setup reverse proxy in IIS using URL Rewrite module. I see the Re-Write URL set to http://http://localhost:9000/{R:1}
However when I browse https://sonarqube.mydomain.com I get the error below
502 - Web server received an invalid response while acting as a gateway or proxy server.
Is there anything i need to enable in SonarQube to enable Reverse Proxy?
I could not find anything in website's logs %SystemDrive%\inetpub\logs\LogFiles
found it
I don't know why URL Rewrite module was adding URL as http://http://localhost:9000/{R:1}
I manually changed it to http://localhost:9000/{R:1} and it worked

Integrating node.js and express website with wordpress hosting

I have a website running on node.js and express, hosted on Amazon EC2 with a normal domain (e.g. www.example.com)
We want to add a blog to the website. We would like the blog route to be www.example.com/blog
I have tried a Ghost installation under node.js (with a proxy layer to handle the port and url remap). I got it working ok, but the feature set is not robust enough for our content creators. They would rather work with WordPress.
But WordPress does not have a node.js install, and I do not have the bandwidth to set up and run a WAMP server in addition to the node.js server we currently use.
So I am investigating using a another hosting option for wordpress and using a proxy layer to redirect to the hosted wordpress blog.
From what I have read online, WordPress hosting will not work (cannot configure the URL properly on the WordPress side). And I could not get the proxy layer to work with a test account.
Will a 3rd party (like GoDaddy) work?
I am envisioning that we host the blog on GoDaddy. And on our site, I set up a proxy to map www.coursehunter.org/blog to the GoDaddy hosted Wordpress blog. Has anyone done this? Does it work technically? I understand I would probably have to edit the .htaccess file.
Are there SEO gotchyas from an implementation perspective? The main point of our blog is to build out content for our main domain which is why we want the www.example.com/blog url.
Thanks!
I would suggest you look into Nginx web server. You can set it up as a reverse proxy for your NodeJS/Express web application and install its php-fpm module to handle the PHP part(Wordpress).
Here is a guide to set up Wordpress with Nginx https://www.digitalocean.com/community/tutorials/how-to-install-wordpress-with-nginx-on-ubuntu-14-04
And here is one with set up your NodeJS application with Nginx https://www.digitalocean.com/community/tutorials/how-to-set-up-a-node-js-application-for-production-on-ubuntu-14-04
In your case, you will need to setup the url configuration so that the parts get routed to the correct destination that is NodeJS part is handled by reverse proxy and Wordpress is handled by php-fpm

Is it true that ASP.NET MVC Browser link does not work for https (SSL) url?

I am trying the Browserlink feature of ASP.NET MVC 5 and everything works great for non SSL pages. But if I navigate to a SSL page (with https url), I see 0 connections in the Browser link dashboard. So, is it true that Browser link works only for non SSL urls ? Or am I am missing any settings which will allow me to get Browser Link connection for both SSL and Non SSL urls ?
(I am testing from IIS)
According to this link, Microsoft is working on it.
I have been able to get around the issue by following these steps (using Chrome):
When the debugger opens the browser, open the F12 tools.
Go to the Console tab.
There should be an error message that looks something like this: GET https://localhost:[port]/[guid]/browserLink net::ERR_INSECURE_RESPONSE
Open the link in a new tab.
Click Proceed anyway.
Close the Browser Link tab.
Reload the tab with your app.
Browser Link should then start working.
I've also worked around it by getting the script link, reducing it to the root, and browsing there. Once there, accept the cert warning then view the cert and install it into the trusted roots. From then on, the cert will be trusted and the script will load automatically.
It appears that this limitation has been removed in Visual Studio 2015. I do not see any mention of this in the release notes, but Browser Link is fully operational in my dev environment under SSL.
I was unable to get Browser Link, Web Essentials, to work with SSL, even with the mentioned remedies. I was able to find a way, however, to get it work for me.
I am running my app through IIS (not express) and my app was nested under the default website. When debugging the site I saw that Chrome was dumping a connection error with a URL using port 44399. Adding a binding for this port, for https, then allowed the connection to be successful. I also used a local development cert for the SSL Certificate.
DISCLAIMER: Visual Studio tries to be your buddy and not use ports that you've bound to in IIS so once you close and re-open Visual Studio it will likely not use the 44399 port anymore. It looks like it decrements until it finds the next available port. So assuming you're not using 44398 this will be your number. Once you unbind 44399, then close and re-open Visual Studio it will likely rebind to 44399 again.
Hopefully this helps some of you out.
I had a similar issue involving custom domains and subdomains on IIS Express over HTTPS.
(Using SSL certificate I self-signed with support for localhost and my custom domain, installed with self-signed root authority in the trusted certificate store)
I had got IISEx to use the certificate and serve it on port 443 (as admin user), but browserlink was failing with CONNECTION_RESET.
This persisted even after switching back to using localhost as the website url for IIS etc.
Turns out I had forgotten to replace the certificate associated with the other ports IIS Express uses (specifically port 44399), which were still associated with the default development certificate used by IIS Express
http://www.iis.net/learn/extensions/using-iis-express/handling-url-binding-failures-in-iis-express
http://benjii.me/2014/11/run-iis-express-on-port-443-using-ssl-and-wildcard-subdomains/
[Simple Guide but missing the delete existing certificate bindings guidance]
For Windows 10 IIS Express users.
In visual studio click "View in Browser" in Browser Link
Dashboard .
An IIS Express icon will appear in system tray.
Right Click the IIS Express icon.Your application should be listed in both HTTP and HTTPS.
Hope it helps.

Neo4j running behind proxy on IIS

What's required to setup Neo4j behind IIS proxy server?
I am running into the issue listed here: https://github.com/neo4j/neo4j/issues/112
Error message (Chrome console):
displayed insecure content from =1363713541737">http://xyz:7474/db/data/?=1363713541737
xyz is the server name.
Thanks
Considering the GitHub issue is still open, you can assume that this is not currently supported and no workaround has been supplied by Neo.
If you want to persist ahead, you will need to rewrite the content passing through the proxy.

Resources