Page MenuHomePhabricator

Enable HTTPS on a Labs instance
Closed, ResolvedPublic

Description

We switched to Labs hoping that it would bring us HTTPS, but apparently not.

I created an instance with this enabled:

  • role::lamp::labs
  • certificates::star_wmflabs_org

But Firefox says "Unable to connect": https://i-000008da.pmtpa-proxy.wmflabs.org

Am I missing something? What should I do to allow visitors to connect via SSL?


Version: unspecified
Severity: major
See Also:
https://bugzilla.wikimedia.org/show_bug.cgi?id=48501

Details

Reference
bz54065

Event Timeline

bzimport raised the priority of this task from to Needs Triage.Nov 22 2014, 2:11 AM
bzimport added a project: Cloud-VPS.
bzimport set Reference to bz54065.

Nope, HTTPS is currently unsupported on labs. Work is currently underway to rectify/improve this situation.

Someone who is actually directly involved in making this work should be able to give you a suggested timeframe till it should work.

Sam, thanks for confirming the problem!
Could you please switch this report from UNCONFIRMED to CONFIRMED?
Thanks!

Also: Marking as major, as it makes Wikivoyage's dynamic maps unusable for most users (they don't notice the SSL mixed-protocol icon, and just see a blank square where the map should be).

We have a new dynamic proxy that has HTTPS and also allows you to have a nice DNS name that doesn't include instance-proxy. I'll ping yuvi, who's managing this, tomorrow.

(In reply to comment #2)

Also: Marking as major, as it makes Wikivoyage's dynamic maps unusable for
most users

For the records, this was also discussed in https://de.wikivoyage.org/wiki/Benutzer_Diskussion:Mey2008#PoiMap2.2C_https_and_Firefox_23

singaporemaps wrote:

Question: why is a separate instance required? I would have thought that hosting it at a page like tools.wmflabs.org/wikivoyage/poimap would work.

@torty: I would be glad to use the place you mention if someone grants me read/write access to it.
Anywhere is fine as long as it can run our PHP script over HTTPS.

@Cyberpower678: Interesting! Any idea how they achieved this?

@Ryan: Any news about the dynamic proxy?

(In reply to comment #7)

@torty: I would be glad to use the place you mention if someone grants me
read/write access to it.
Anywhere is fine as long as it can run our PHP script over HTTPS.

@Cyberpower678: Interesting! Any idea how they achieved this?

@Ryan: Any news about the dynamic proxy?

Well I achieved it by simply tossing it into the public_html folder and going to that address with https. Nothing special to it.

Do you mean you created a "public_html" folder in your user home?
I have no such folder here, so I have put everything in /var/www and it mostly works (for a few hours before becoming 404, see https://bugzilla.wikimedia.org/show_bug.cgi?id=54059 different problem)

I guess these pages could use more detailed explanations:
https://wikitech.wikimedia.org/wiki/Help:Lamp_Instance
https://wikitech.wikimedia.org/wiki/Help:LAMP_issues

(In reply to comment #9)

Do you mean you created a "public_html" folder in your user home?
I have no such folder here, so I have put everything in /var/www and it
mostly
works (for a few hours before becoming 404, see
https://bugzilla.wikimedia.org/show_bug.cgi?id=54059 different problem)

I guess these pages could use more detailed explanations:
https://wikitech.wikimedia.org/wiki/Help:Lamp_Instance
https://wikitech.wikimedia.org/wiki/Help:LAMP_issues

No. It should already be there. xtools runs on the tools instance.

scott.leea wrote:

What's the status on this ticket? Is this something I can work on? (I am a new volunteer).

This has been fixed now. If you are using your own instance, use Special:NovaProxy on wikitech to create a https enabled proxy. If you're using toollabs, you already have https.