chishola1 Posted March 20, 2023 Share Posted March 20, 2023 I am trying to set my server (6.11.5) to always use ssl. I was able to provision cert from Let's Encrypt and use it to access server using provided link but the strict option in the management access page is greyed out. I have not been able to find any information about that option greyed out. Any help would be appreciated. Quote Link to comment
ljm42 Posted March 20, 2023 Share Posted March 20, 2023 On Settings -> Management Access, are there any messages or warnings on screen? Please upload your diagnostics.zip file from Tools -> Diagnostics Quote Link to comment
chishola1 Posted March 20, 2023 Author Share Posted March 20, 2023 Only message is that my local cert is self signed. tower-diagnostics-20230320-0906.zip Quote Link to comment
ljm42 Posted March 21, 2023 Share Posted March 21, 2023 Strict mode only applies when using a myunraid.net cert. For more info about SSL see https://wiki.unraid.net/Manual/Security#Securing_webGui_connections_.28SSL.29 Quote Link to comment
chishola1 Posted March 22, 2023 Author Share Posted March 22, 2023 I misspoke, I am using a myunraid.net cert. https://192-168-0-138.ac9xxxxxxxxxxxxxxx7316ad0567c55e478541f9.myunraid.net/ Quote Link to comment
ljm42 Posted March 23, 2023 Share Posted March 23, 2023 OK, according to your diagnostics, "DNS Rebinding Protection" is enabled on your network. There should be a message warning you about this on the Settings -> Management Access page? The system won't let you enable strict mode when DNS Rebinding Protection is enabled because then you will lose access to the webgui. I think you are saying that https://192-168-0-138.ac9xxxxxxxxxxxxxxx7316ad0567c55e478541f9.myunraid.net/ works from your client. In that case "DNS Rebinding Protection" Isn't an issue for your whole network, just the server. The server is set to use 75.75.75.75 for DNS, try changing that to 8.8.8.8 (see Settings -> Network Settings with the array stopped) Quote Link to comment
chishola1 Posted March 23, 2023 Author Share Posted March 23, 2023 I changed the DNS but am still not able to set ssl to strict, option is grayed out. Quote Link to comment
ljm42 Posted March 23, 2023 Share Posted March 23, 2023 Do you see a message on the page saying anything about DNS Rebinding? A screenshot would be helpful, but blank out the myunraid.net url Please upload the latest diagnostics so I can see if the message is still there. Quote Link to comment
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.