Https redirect broken after 6.10 update SSL/TLS


Go to solution Solved by ljm42,

Recommended Posts

I am attempting to access my server via https://tower.local and https://<serverip>. On previous versions it would redirect to provisioned cert https://xxxxxxxx.myunraid.net/Main. Now I am prompted with an ssl not secure prompt. I attempted to turn off ssl/tls and turn back on. Re-provisioned the cert still no go. If I go directly to the https://xxxxxxxx.myunraid.net/Main link it works correctly. Not sure if anyone has a fix for this or ran into this problem?

  • Upvote 1
Link to comment

Navigating to tower.local or my server's IP address does not work like it used to for me either on 6.10.2. It used to redirect to the server's unraid.net address but now it does not. I miss that redirect feature even if it turns out it was unintentional. Not having to bookmark the page meant I could access my server from any browser on my network without trying to remember the URL.

  • Upvote 1
Link to comment
  • Solution

For redirects to kick in you need to use http://[ipaddress] or http://[servername].[localTLD] (note: http not https)

 

The exact behavior of the redirect depends on the value of your "Use SSL/TLS" setting:

  • If Use SSL/TLS is set to Strict, you will be redirected to https://[lan-ip].[hash].myunraid.net However, this behavior makes it more difficult to access your server when DNS is unavailable (i.e. your Internet goes down). If that happens see the note under https://wiki.unraid.net/Manual/Security#Https_with_Unraid.net_certificate_-_with_no_fallback_URL 
  • If Use SSL/TLS is set to Yes, you will be redirected to https://[servername].[localTLD] as that will likely work even if your Internet goes down.
  • If Use SSL/TLS is set to No, then the http url will load directly.

Personally, I prefer the "Strict" setting as my Internet is pretty stable.

 

I just added this to the documentation:
  https://wiki.unraid.net/Manual/Security#Redirects
in the section talking about how to setup SSL:

  https://wiki.unraid.net/Manual/Security#Securing_webGui_connections_.28SSL.29

  • Upvote 1
Link to comment
On 6/6/2022 at 4:05 PM, ljm42 said:

For redirects to kick in you need to use http://[ipaddress] or http://[servername].[localTLD] (note: http not https)

 

The exact behavior of the redirect depends on the value of your "Use SSL/TLS" setting:

  • If Use SSL/TLS is set to Strict, you will be redirected to https://[lan-ip].[hash].myunraid.net However, this behavior makes it more difficult to access your server when DNS is unavailable (i.e. your Internet goes down). If that happens see the note under https://wiki.unraid.net/Manual/Security#Https_with_Unraid.net_certificate_-_with_no_fallback_URL 
  • If Use SSL/TLS is set to Yes, you will be redirected to https://[servername].[localTLD] as that will likely work even if your Internet goes down.
  • If Use SSL/TLS is set to No, then the http url will load directly.

Personally, I prefer the "Strict" setting as my Internet is pretty stable.

 

I just added this to the documentation:
  https://wiki.unraid.net/Manual/Security#Redirects
in the section talking about how to setup SSL:

  https://wiki.unraid.net/Manual/Security#Securing_webGui_connections_.28SSL.29

 This is it. Set to strict all good now. Thank you.

  • Like 1
Link to comment
  • 2 months later...

Hello guys,

 

i got same problems that xxnumbxx had. But mine happend after update without doing anything. I have in managment access everything stock only SSL setup on STRICT. I see that my address https://192.168.88.10 or https://tower.local wont redirect only warning sign pop out in chrome that certificate is not valid. When i go to 192-168-88-10.28422814aaf1cc4afabea0......net everything is ok. 

 

Edit: I now see this on picture when i have setting on strict SSH.

Snímka obrazovky 2022-09-05 221654.jpg

Snímka obrazovky 2022-09-05 221501.png

Link to comment
On 9/5/2022 at 1:20 PM, techgeeksvk said:

Hello guys,

 

i got same problems that xxnumbxx had. But mine happend after update without doing anything. I have in managment access everything stock only SSL setup on STRICT. I see that my address https://192.168.88.10 or https://tower.local wont redirect only warning sign pop out in chrome that certificate is not valid. When i go to 192-168-88-10.28422814aaf1cc4afabea0......net everything is ok. 

 

Please see this section of the wiki talking about redirects:

  https://wiki.unraid.net/Manual/Security#Redirects

Redirects are from http not https. So if you go to http://192.168.88.10 (note http not https) you will be redirected.

 

 

On 9/5/2022 at 1:20 PM, techgeeksvk said:

Edit: I now see this on picture when i have setting on strict SSH.

 

When in Strict mode, the server will only respond using the official SSL certificate on the urls that are valid for that certificate.

 

If you are trying to get a redirect, go to http://192.168.88.10 (note http not https)

Link to comment
  • 3 weeks later...

Thanks for help i get it how it works but i still have problem. If i write http://192.168.88.10 i will be redirect to https://192.168.88.10 and get 404 nginx error (in strict). But the http://192.168.88.10 should redirect me to the site with certificate (down on the photo) but it dont. I only got the error. If i redirect via tower.local i get site that i should but only http://192.168.88.10 or https://192.168.88.10 is a problem. I am really sorry for your time its not that i need this to be ok, but when i look  at it my hands starts itching.1399210552_Snmkaobrazovky2022-09-26013117.png.c1b91d539e6aa0096f000610ebf53824.png:D

Edited by techgeeksvk
writing badly in english :D
Link to comment
On 9/25/2022 at 4:37 PM, techgeeksvk said:

Thanks for help i get it how it works but i still have problem. If i write http://192.168.88.10 i will be redirect to https://192.168.88.10 and get 404 nginx error (in strict). But the http://192.168.88.10 should redirect me to the site with certificate (down on the photo) but it dont. I only got the error. If i redirect via tower.local i get site that i should but only http://192.168.88.10 or https://192.168.88.10 is a problem. I am really sorry for your time its not that i need this to be ok, but when i look  at it my hands starts itching.1399210552_Snmkaobrazovky2022-09-26013117.png.c1b91d539e6aa0096f000610ebf53824.png:D

 

I'm going to guess this is a browser caching issue. Try it in private/incognito mode

Link to comment

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.