<div dir="ltr"><div>Dear All,</div><div><br></div><div>Kindly help me enable SSL for GeoNode.</div><div><br></div><div>Thanks&Regards,</div><div>Naresh.N<br></div><div><br><div class="gmail_quote"><div dir="ltr">---------- Forwarded message ---------<br>From: <b class="gmail_sendername" dir="auto">Naresh N</b> <span dir="ltr"><<a href="mailto:naresh919@gmail.com" target="_blank">naresh919@gmail.com</a>></span><br>Date: Thu, Oct 25, 2018 at 5:30 PM<br>Subject: SSL enable -- for GeoNode<br>To: geonode-users <a href="http://lists.osgeo.org" target="_blank">lists.osgeo.org</a> <<a href="mailto:geonode-users@lists.osgeo.org" target="_blank">geonode-users@lists.osgeo.org</a>><br></div><br><br><div dir="ltr"><div dir="ltr">Dear All,<div><br></div><div>Please help to enable https for GeoNode. Please find the details below</div><div><br></div><div>Server OS: RHEL 7.2</div><div>GeoNode Version: 2.4</div><div>64 -bit machine.</div><div><br></div><div>The following commands executed. (followed from <b><a href="http://docs.geonode.org/en/2.4.x/tutorials/advanced/geonode_production/ssl.html?highlight=ssl" target="_blank">http://docs.geonode.org/en/2.4.x/tutorials/advanced/geonode_production/ssl.html?highlight=ssl</a></b>)</div><div><br></div><div>1. <span style="background-color:rgb(252,252,252);color:rgb(64,64,64);font-family:Lato,proxima-nova,"Helvetica Neue",Arial,sans-serif;font-size:16px">Copied the our SSL key and certificate to the following locations:</span></div><div><span style="background-color:rgb(252,252,252);color:rgb(64,64,64);font-family:Lato,proxima-nova,"Helvetica Neue",Arial,sans-serif;font-size:16px"> </span><span style="background-color:rgb(252,252,252);color:rgb(64,64,64);font-family:Consolas,"Andale Mono WT","Andale Mono","Lucida Console","Lucida Sans Typewriter","DejaVu Sans Mono","Bitstream Vera Sans Mono","Liberation Mono","Nimbus Mono L",Monaco,"Courier New",Courier,monospace;font-size:12px">sudo cp server.crt /etc/</span><span class="m_-2456981033845050289m_-383900446918631230gmail-highlighted" style="color:rgb(64,64,64);font-family:Consolas,"Andale Mono WT","Andale Mono","Lucida Console","Lucida Sans Typewriter","DejaVu Sans Mono","Bitstream Vera Sans Mono","Liberation Mono","Nimbus Mono L",Monaco,"Courier New",Courier,monospace;font-size:12px;box-sizing:border-box;background:rgb(241,196,15);display:inline-block;font-weight:bold;padding:0px 6px">ssl</span><span style="background-color:rgb(252,252,252);color:rgb(64,64,64);font-family:Consolas,"Andale Mono WT","Andale Mono","Lucida Console","Lucida Sans Typewriter","DejaVu Sans Mono","Bitstream Vera Sans Mono","Liberation Mono","Nimbus Mono L",Monaco,"Courier New",Courier,monospace;font-size:12px">/certs/geonode.crt</span></div><pre style="box-sizing:border-box;font-family:Consolas,"Andale Mono WT","Andale Mono","Lucida Console","Lucida Sans Typewriter","DejaVu Sans Mono","Bitstream Vera Sans Mono","Liberation Mono","Nimbus Mono L",Monaco,"Courier New",Courier,monospace;font-size:12px;margin-top:0px;margin-bottom:0px;padding:12px;overflow:auto;line-height:normal;color:rgb(64,64,64);background-color:rgb(252,252,252)"> sudo cp server.key /etc/ssl/geonode.key</pre><pre style="box-sizing:border-box;font-family:Consolas,"Andale Mono WT","Andale Mono","Lucida Console","Lucida Sans Typewriter","DejaVu Sans Mono","Bitstream Vera Sans Mono","Liberation Mono","Nimbus Mono L",Monaco,"Courier New",Courier,monospace;font-size:12px;margin-top:0px;margin-bottom:0px;padding:12px;overflow:auto;line-height:normal;color:rgb(64,64,64);background-color:rgb(252,252,252)">2. The following lines are included in the file - /etc/httpd/conf/geonode.conf</pre><pre style="box-sizing:border-box;font-family:Consolas,"Andale Mono WT","Andale Mono","Lucida Console","Lucida Sans Typewriter","DejaVu Sans Mono","Bitstream Vera Sans Mono","Liberation Mono","Nimbus Mono L",Monaco,"Courier New",Courier,monospace;font-size:12px;margin-top:0px;margin-bottom:0px;padding:12px;overflow:auto;line-height:normal;color:rgb(64,64,64);background-color:rgb(252,252,252)"> <VirtualHost
*:80></pre>
<p class="MsoNormal" style="margin:0in 0in 0.25in;line-height:18pt;background:rgb(252,252,252);font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif;color:rgb(64,64,64)">with:</span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:normal;background:rgb(252,252,252);font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)"><IfModule mod_</span><b><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)">ssl</span></b><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)">.c></span></p>
<p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)"><VirtualHost
_default_:443></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.25in;line-height:18pt;background:rgb(252,252,252);font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif;color:rgb(64,64,64)">At the bottom of the
file, replace:</span></p>
<p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)"></VirtualHost></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.25in;line-height:18pt;background:rgb(252,252,252);font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif;color:rgb(64,64,64)">with:</span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:normal;background:rgb(252,252,252);font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)"> </span><b><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)">SSL</span></b><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)">Engine on</span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:normal;background:rgb(252,252,252);font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)"> SSLCertificateFile /etc/ssl/certs/geonode.crt</span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:normal;background:rgb(252,252,252);font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)"> SSLCertificateKeyFile
/etc/ssl/certs/geonode.key</span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:normal;background:rgb(252,252,252);font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)"> </span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:normal;background:rgb(252,252,252);font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)"></VirtualHost></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:normal;background:rgb(252,252,252);font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)"></IfModule></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:normal;background:rgb(252,252,252);font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)"> </span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:normal;background:rgb(252,252,252);font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)"><VirtualHost *:80></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:normal;background:rgb(252,252,252);font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)"> Redirect permanent / <a href="https://domainname/" target="_blank">https://domainname/</a></span></p>
<p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)"></VirtualHost></span></p><p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)">3. </span><span style="font-size:12pt;font-family:Arial,sans-serif;color:rgb(64,64,64)">the </span><span style="font-size:9pt;font-family:Consolas;color:rgb(231,76,60)">SITEURL </span><span style="font-size:12pt;font-family:Arial,sans-serif;color:rgb(64,64,64)">protocol to https: in local_settings.py and settings.py</span></p><p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)">SITEURL</span><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)"> </span><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)">=</span><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)"> </span><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)">'https://<ipaddressOrDomainName>/'</span><br></p><p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt"><font face="Consolas" color="#404040"><span style="font-size:9pt">4. </span><span style="font-size:12px">Apache</span><span style="font-size:9pt"> restarted</span></font></p><p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt"><font face="Consolas" color="#404040"><span style="font-size:12px">Before changing Tomcat and other Geoserver settings, I want to see whether GeoNode Home page appears with https or not.</span></font></p><p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt"><font face="Consolas" color="#404040"><span style="font-size:12px">I have opened the geonode home page with https it is not Opening.</span></font></p><p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt"><br></p><p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt">Is the procedure followed is correct? If not please help to enable to run GeoNode with SSL</p><p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt">Please let me know any other information required further </p><p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt"><br></p><p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt">Thanks&Regards,</p><p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt">Naresh</p><p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt"><br></p><p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt"><br></p><p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt"><br></p><p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt"><br></p><p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)"><br></span></p><p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)"></span></p><p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)"><br></span></p><p class="MsoNormal" style="line-height:normal;background:rgb(252,252,252);margin:0in 0in 10pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:9pt;font-family:Consolas;color:rgb(64,64,64)"><br></span></p></div></div>
</div></div></div>