On Thursday, February 28, 2013 at 15:52, Sean OMeara wrote:
You need to have a CN that matches the FQDN of your chef-server forSSL to work properly.-sOn Thu, Feb 28, 2013 at 1:37 PM, Jesse Campbell < "> > wrote:that is what happens for me, yes.if i connect to http://chef-app01.ops.sub.domain (default port 80), itredirects me to https://chef-app01.ops (default port 443), which doesn'texist... but if i connect directly to https://chef-app01.ops.sub.domain, itworks fine.it would be great if it didn't break on redirect, but I don't know where thecode is to fix that...On Thu, Feb 28, 2013 at 1:23 PM, Cassiano Leal < "> >wrote:Are you saying that the redirection only occurs if I hit http, not https?That would be helpful.- cassianoOn Thursday, February 28, 2013 at 15:07, Jesse Campbell wrote:A more normal redirect pattern I have seen is to save the host name fromthe request parameter and simply change the scheme from http to https...here's how we do it on an F5:HTTP::redirect https://[HTTP::host][HTTP::uri]I'm not sure off hand what the proper syntax is for nginx or apache, butit should be straightforward-JesseOn Thu, Feb 28, 2013 at 12:36 PM, Cassiano Leal < "> >wrote:Out of curiosity, why redirect in the first place? :)- cassianoOn Thursday, February 28, 2013 at 14:06, Adam Jacob wrote:It's a reasonable default for most situations – the alternative is to usethe IP Address, which is actively icky as well.AdamFrom: Cassiano Leal < "> >Date: Thursday, February 28, 2013 7:01 AMSubject: [chef] chef-server on a VMOhai Chefs,Why does the omnibus chef-server deb not work by default on a VM?but at the end, if I hit the webserver on port 80 it redirects me to theVM's hostname, which is obviously not accessible from outside of the VMunless I edit my hostsfile.I'm wondering why it's set like that by default; it seems like ananti-pattern. Also, how do I change this behaviour?Other than that, the omnibus package is a breeze to install. Fantasticjob!- cassiano
Archive powered by MHonArc 2.6.16.