<div dir="ltr">Dear Amedo/Simone,<div><br></div><div>Please see once my post and reply. Not able to understand? Where the issue.</div><div> </div><div>Is following require for GeoNode to work as https?</div><div><pre style="box-sizing:border-box;font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",Courier,monospace;font-size:12px;margin-top:0px;margin-bottom:0px;padding:12px;overflow:auto;line-height:1.4;color:rgb(64,64,64)"><span class="gmail-n" style="box-sizing:border-box">sudo</span> <span class="gmail-o" style="box-sizing:border-box;color:rgb(102,102,102)">-</span><span class="gmail-n" style="box-sizing:border-box">s</span> <span class="gmail-s2" style="box-sizing:border-box;color:rgb(64,112,160)">"cat server.crt >> /usr/lib/python2.7/dist-packages/httplib2/cacerts.txt"</span>
<span class="gmail-n" style="box-sizing:border-box">sudo</span> <span class="gmail-n" style="box-sizing:border-box">keytool</span> <span class="gmail-o" style="box-sizing:border-box;color:rgb(102,102,102)">-</span><span class="gmail-kn" style="box-sizing:border-box;color:rgb(0,112,32);font-weight:bold">import</span> <span class="gmail-o" style="box-sizing:border-box;color:rgb(102,102,102)">-</span><span class="gmail-n" style="box-sizing:border-box">alias</span> <span class="gmail-n" style="box-sizing:border-box">geonodessl</span> <span class="gmail-o" style="box-sizing:border-box;color:rgb(102,102,102)">-</span><span class="gmail-n" style="box-sizing:border-box">keystore</span> <span class="gmail-o" style="box-sizing:border-box;color:rgb(102,102,102)">/</span><span class="gmail-n" style="box-sizing:border-box">etc</span><span class="gmail-o" style="box-sizing:border-box;color:rgb(102,102,102)">/</span><span class="gmail-n" style="box-sizing:border-box">ssl</span><span class="gmail-o" style="box-sizing:border-box;color:rgb(102,102,102)">/</span><span class="gmail-n" style="box-sizing:border-box">certs</span><span class="gmail-o" style="box-sizing:border-box;color:rgb(102,102,102)">/</span><span class="gmail-n" style="box-sizing:border-box">java</span><span class="gmail-o" style="box-sizing:border-box;color:rgb(102,102,102)">/</span><span class="gmail-n" style="box-sizing:border-box">cacerts</span> <span class="gmail-o" style="box-sizing:border-box;color:rgb(102,102,102)">-</span><span class="gmail-n" style="box-sizing:border-box">file</span> <span class="gmail-n" style="box-sizing:border-box">server</span><span class="gmail-o" style="box-sizing:border-box;color:rgb(102,102,102)">.</span><span class="gmail-n" style="box-sizing:border-box">crt</span></pre><pre style="box-sizing:border-box;font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",Courier,monospace;font-size:12px;margin-top:0px;margin-bottom:0px;padding:12px;overflow:auto;line-height:1.4;color:rgb(64,64,64)"><span class="gmail-n" style="box-sizing:border-box">Please suggest</span></pre><pre style="box-sizing:border-box;font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",Courier,monospace;font-size:12px;margin-top:0px;margin-bottom:0px;padding:12px;overflow:auto;line-height:1.4;color:rgb(64,64,64)"><span class="gmail-n" style="box-sizing:border-box"><br></span></pre><pre style="box-sizing:border-box;font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",Courier,monospace;font-size:12px;margin-top:0px;margin-bottom:0px;padding:12px;overflow:auto;line-height:1.4;color:rgb(64,64,64)"><span class="gmail-n" style="box-sizing:border-box">Thanks&Regards,</span></pre><pre style="box-sizing:border-box;font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",Courier,monospace;font-size:12px;margin-top:0px;margin-bottom:0px;padding:12px;overflow:auto;line-height:1.4;color:rgb(64,64,64)">Naresh</pre><pre style="box-sizing:border-box;font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",Courier,monospace;font-size:12px;margin-top:0px;margin-bottom:0px;padding:12px;overflow:auto;line-height:1.4;color:rgb(64,64,64)"><br></pre></div><div><br></div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Dec 5, 2019 at 4:07 PM Naresh N <<a href="mailto:naresh919@gmail.com">naresh919@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>Dear All,</div><div><br></div><div>As I posted earlier, we need to enable GeoNode with https but facing the issues. The following are added for https</div><div><br></div><div><div> 1. Apache Configured with https and required changes are added in geonode.conf as per mentioned in <a href="http://docs.geonode.org/en/2.8.1/tutorials/advanced/geonode_production/ssl.html" target="_blank">http://docs.geonode.org/en/2.8.1/tutorials/advanced/geonode_production/ssl.html</a></div><div><br></div><div>2. Tomcat /GeoServer Configuration - </div><div> (i)Modified the Server.xml and done required changes </div><div> <span style="color:rgb(80,0,80);font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",Courier,monospace;font-size:12px;white-space:pre-wrap;box-sizing:border-box"><font color="#666666"><</font></span><span style="font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",Courier,monospace;font-size:12px;white-space:pre-wrap;color:rgb(64,64,64);box-sizing:border-box">Connector</span><font style="font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",Courier,monospace;font-size:12px;white-space:pre-wrap"> </font><span style="font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",Courier,monospace;font-size:12px;white-space:pre-wrap;color:rgb(64,64,64);box-sizing:border-box">port</span><span style="font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",Courier,monospace;font-size:12px;white-space:pre-wrap;color:rgb(102,102,102);box-sizing:border-box">=</span><span style="font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",Courier,monospace;font-size:12px;white-space:pre-wrap;color:rgb(64,112,160);box-sizing:border-box">"8080"</span><font style="font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",Courier,monospace;font-size:12px;white-space:pre-wrap"> </font><span style="font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",Courier,monospace;font-size:12px;white-space:pre-wrap;color:rgb(64,64,64);box-sizing:border-box">protocol</span><span style="font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",Courier,monospace;font-size:12px;white-space:pre-wrap;color:rgb(102,102,102);box-sizing:border-box">=</span><span style="font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",Courier,monospace;font-size:12px;white-space:pre-wrap;color:rgb(64,112,160);box-sizing:border-box">"HTTP/1.1"</span></div><pre style="white-space:pre-wrap;color:rgb(80,0,80);box-sizing:border-box;font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",Courier,monospace;font-size:12px;margin-top:0px;margin-bottom:0px;padding:12px;overflow:auto;line-height:1.4"><font style="color:rgb(34,34,34)"> </font><span style="color:rgb(64,64,64);box-sizing:border-box">connectionTimeout</span><span style="color:rgb(102,102,102);box-sizing:border-box">=</span><span style="color:rgb(64,112,160);box-sizing:border-box">"20000"</span><font style="color:rgb(34,34,34)">
</font><span style="color:rgb(64,64,64);box-sizing:border-box">URIEncoding</span><span style="color:rgb(102,102,102);box-sizing:border-box">=</span><span style="color:rgb(64,112,160);box-sizing:border-box">"UTF-8"</span><font style="color:rgb(34,34,34)">
</font><span style="box-sizing:border-box"><font color="#00ff00">scheme</font></span><span style="color:rgb(102,102,102);box-sizing:border-box">=</span><span style="color:rgb(64,112,160);box-sizing:border-box">"https"</span><font style="color:rgb(34,34,34)">
</font><span style="color:rgb(64,64,64);box-sizing:border-box">proxyName</span><span style="color:rgb(102,102,102);box-sizing:border-box">=</span><span style="color:rgb(64,112,160);box-sizing:border-box">"<ourDomainName .. for example as<b> <a href="http://exmaple.com/" target="_blank">exmaple.com</a> </b>>"</span><font style="color:rgb(34,34,34)">
</font><span style="color:rgb(64,64,64);box-sizing:border-box">proxyPort</span><span style="color:rgb(102,102,102);box-sizing:border-box">=</span><span style="color:rgb(34,34,34);box-sizing:border-box"><font color="#4070a0">"</font><font color="#ff0000">443</font><font color="#4070a0">"</font></span><font style="color:rgb(34,34,34)">
</font><span style="color:rgb(102,102,102);box-sizing:border-box"> /></span></pre><div> (ii) Modified /var/lib/tomcat/webapps/geoserver/WEB-INF/web.xml</div><div> <b> Geonode_BASE_URL</b> to <a href="https://ourdomainname" target="_blank">https://ourdomainname</a></div><div><br></div><div> (iii) Modified /var/lib/tomcat/webapps/geoserver/data/web.xml))</div><div><br></div><div> <b> Proxybaseurl </b>: <b> https://</b>ourdomainname/geoserver </div><div> <br></div><div><span>3. GeoNode</span> Configuration - Changed Site Url to https</div><div> (i)
/var/lib/tomcat/webapps/geoserver/data/security/auth/geonodAuthProvider/config.xml
</div><div> baseurl to <a href="https://ourdoamingname" target="_blank">https://ourdoamingname</a></div><div> (ii) In local_settings.py and setttings.py </div><div> a. sitename and siteurl to <a href="https://ourdomainname" target="_blank">https://ourdomainname</a></div><div> b.GEOSERVER_LOCATION: <b><a href="http://ourdomainname:8080/geoserver" target="_blank">http://ourdomainname:8080/geoserver</a></b></div><div> GEOSERVER_PUBLIC_LOCATION: <b>https:// ourdomainname/geoserver
</b><br></div><div><br></div><div><br></div><div> After doing the above the changes , <b>our GeoNode portal is able to access with https</b>, however the following functionalities are not working</div><div><br></div><div> 1. When we are uploading the data, the following error is appearing</div><div><br></div><div> <span style="color:rgb(138,109,59);font-family:Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:14px;background-color:rgb(252,248,227)">Tried to make a GET request to </span><a href="http://localhost:8080/geoserver/rest/workspaces/default.xml" style="font-family:Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:14px" target="_blank">http://ourdomainname:8080/geoserver/rest/workspaces/default.xml</a><span style="color:rgb(138,109,59);font-family:Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:14px;background-color:rgb(252,248,227)"> but got a 404 status code:'</span></div><div><span style="color:rgb(138,109,59);font-family:Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:14px;background-color:rgb(252,248,227)"><br></span></div><div><span style="color:rgb(138,109,59);font-family:Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:14px;background-color:rgb(252,248,227)">2. Edit style is not working</span></div><div><span style="color:rgb(138,109,59);font-family:Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:14px;background-color:rgb(252,248,227)"> </span><a href="https://domainname/gs/rest/layers/geonode:_11_19_2019_6450480_1.json" target="_blank">https://domainname/gs/rest/layers/geonode:_11_19_2019_6450480_1.json</a> -- <b> notfound (error code:404)</b></div><div><b> </b><a href="https://ourdomainname/gs/rest/styles/_11_19_2019_6450480_1.xml" target="_blank">https://ourdomainname/gs/rest/styles/_11_19_2019_6450480_1.xml</a> --- error code 500 ( some internal server error)</div><div><br></div><div>In above both are <b>REST services which are not working</b> however, When I tried to access <b><a href="http://ourdomainname:8080/geoserver" target="_blank">http://ourdomainname:8080/geoserver</a> it is redirecting to <a href="https://ourdomainname/geoserver" target="_blank">https://ourdomainname/geoserver</a></b> ( it is loading properly) </div><div> </div><div>Please kindly help me, is somewhere I need to do the REST services settings.</div><div><br></div><div>Thanks&Regards,</div><div>Naresh.n</div><div><br></div><div> </div><div><br></div><div><br></div><div><br></div><div><span style="color:rgb(138,109,59);font-family:Lato,"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:14px;background-color:rgb(252,248,227)"> </span></div></div></div>
</blockquote></div>