- Posts: 42
- Thank you received: 4
Welcome to the LimeSurvey Community Forum
Ask the community, share ideas, and connect with other LimeSurvey users!
SSL not enforced
- krojQu
- Topic Author
- Offline
- Senior Member
Less
More
3 years 6 months ago #205713
by krojQu
SSL not enforced was created by krojQu
I have this error:
Warning: Please enforce SSL encrpytion in Global settings/Security after SSL is properly configured for your webserver.
How should I configured this?
Warning: Please enforce SSL encrpytion in Global settings/Security after SSL is properly configured for your webserver.
How should I configured this?
The topic has been locked.
- Joffm
- Offline
- LimeSurvey Community Team
Less
More
- Posts: 12880
- Thank you received: 3964
3 years 6 months ago #205715
by Joffm
Volunteers are not paid.
Not because they are worthless, but because they are priceless
Replied by Joffm on topic SSL not enforced
Hi,
as it says, it is not an error, it's a warning.
It remings you to change your environment to a secure connection.
You do this here:
"Configuration / Global Settings / Security"
But only after your webserver is configured to support "https"
Otherwise you will not be able to access LimeSurvey.
Joffm
as it says, it is not an error, it's a warning.
It remings you to change your environment to a secure connection.
You do this here:
"Configuration / Global Settings / Security"
But only after your webserver is configured to support "https"
Otherwise you will not be able to access LimeSurvey.
Joffm
Volunteers are not paid.
Not because they are worthless, but because they are priceless
The topic has been locked.
- krojQu
- Topic Author
- Offline
- Senior Member
Less
More
- Posts: 42
- Thank you received: 4
3 years 6 months ago #205717
by krojQu
Replied by krojQu on topic SSL not enforced
I didn't check if my webserver supports https and I clicked "On" too fast and I don't have access. Is there any solution now? Need to configure a webserver?
The topic has been locked.
- Joffm
- Offline
- LimeSurvey Community Team
Less
More
- Posts: 12880
- Thank you received: 3964
3 years 6 months ago #205719
by Joffm
Volunteers are not paid.
Not because they are worthless, but because they are priceless
Replied by Joffm on topic SSL not enforced
Two solutions
forums.limesurvey.org/forum/installation...on-by-mistake#202627
Any of these two posts.
Joffm
forums.limesurvey.org/forum/installation...on-by-mistake#202627
Any of these two posts.
Joffm
Volunteers are not paid.
Not because they are worthless, but because they are priceless
The following user(s) said Thank You: krojQu
The topic has been locked.
- krojQu
- Topic Author
- Offline
- Senior Member
Less
More
- Posts: 42
- Thank you received: 4
3 years 6 months ago #205722
by krojQu
Replied by krojQu on topic SSL not enforced
Really thank you Joffm for help, it works now.
But btw maybe you know where I find logs? When I tried configure Lime with Active Directory and next login with LDAP authentication I only see an alert "Invalid username and / or password!". But I want to know what I fill incorrectly in AuthLDAP.
But btw maybe you know where I find logs? When I tried configure Lime with Active Directory and next login with LDAP authentication I only see an alert "Invalid username and / or password!". But I want to know what I fill incorrectly in AuthLDAP.
The topic has been locked.
- Joffm
- Offline
- LimeSurvey Community Team
Less
More
- Posts: 12880
- Thank you received: 3964
3 years 6 months ago #205723
by Joffm
Volunteers are not paid.
Not because they are worthless, but because they are priceless
Replied by Joffm on topic SSL not enforced
You asked this in your other post.
Do not cross post, please.
Joffm
Do not cross post, please.
Joffm
Volunteers are not paid.
Not because they are worthless, but because they are priceless
The topic has been locked.
- kordan
- Offline
- New Member
Less
More
- Posts: 6
- Thank you received: 0
2 years 10 months ago - 2 years 10 months ago #217263
by kordan
Replied by kordan on topic SSL not enforced
My LimeSurvey server (debian 10) is behind a reverse proxy.
I have a couple of certificates covering the server. One in the revProxy and one in LimeSurvey server.
In spite of this in limeSurvey web application I get the Warning: Please enforce SSL encrpytion in Global settings/Security after SSL is properly configured for your webserver.
What am I missing?
The vHost on limeSurvey server has:
<IfModule mod_ssl.c>
<VirtualHost _default_:443>
ServerAdmin me@example.com
DocumentRoot /path/to/somewhere
ErrorLog ${APACHE_LOG_DIR}/lsurvey_error.log
CustomLog ${APACHE_LOG_DIR}/lsurvey_access.log combined
SSLEngine on
SSLCertificateFile /etc/ssl/certs/lsurvey.pem
SSLCertificateKeyFile /etc/ssl/private/lsurvey.key
and mol ssl is enabled
Thanks in advance
I have a couple of certificates covering the server. One in the revProxy and one in LimeSurvey server.
In spite of this in limeSurvey web application I get the Warning: Please enforce SSL encrpytion in Global settings/Security after SSL is properly configured for your webserver.
What am I missing?
The vHost on limeSurvey server has:
<IfModule mod_ssl.c>
<VirtualHost _default_:443>
ServerAdmin me@example.com
DocumentRoot /path/to/somewhere
ErrorLog ${APACHE_LOG_DIR}/lsurvey_error.log
CustomLog ${APACHE_LOG_DIR}/lsurvey_access.log combined
SSLEngine on
SSLCertificateFile /etc/ssl/certs/lsurvey.pem
SSLCertificateKeyFile /etc/ssl/private/lsurvey.key
and mol ssl is enabled
Thanks in advance
Last edit: 2 years 10 months ago by DenisChenu. Reason: Usage of example.com
The topic has been locked.
- DenisChenu
- Offline
- LimeSurvey Community Team
Less
More
- Posts: 13597
- Thank you received: 2487
2 years 10 months ago #217265
by DenisChenu
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
Replied by DenisChenu on topic SSL not enforced
What id the real relation with LimeSurvey ?
SSL on webserver are not related to LimeSurvey
And : why you post on an unrelated topic ?
SSL on webserver are not related to LimeSurvey
And : why you post on an unrelated topic ?
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.
- kordan
- Offline
- New Member
Less
More
- Posts: 6
- Thank you received: 0
2 years 10 months ago - 2 years 10 months ago #217269
by kordan
Replied by kordan on topic SSL not enforced
SSL on webserver is not related to LimeSurvey
but LimeSurvey dispaying an error that I don't know how to justify is a limesurvey topic, IMHO.
I am sorry if I was off topic. I didn't feel. Where am I supposed to ask for this LimeSurvey issue? To Apache2 SSL forums?
but LimeSurvey dispaying an error that I don't know how to justify is a limesurvey topic, IMHO.
I am sorry if I was off topic. I didn't feel. Where am I supposed to ask for this LimeSurvey issue? To Apache2 SSL forums?
Last edit: 2 years 10 months ago by kordan.
The topic has been locked.
- DenisChenu
- Offline
- LimeSurvey Community Team
Less
More
- Posts: 13597
- Thank you received: 2487
2 years 10 months ago #217270
by DenisChenu
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
Replied by DenisChenu on topic SSL not enforced
Oh
It's worst than i think the 1st time …
You post on a topic without read the answer !
It's worst than i think the 1st time …
You post on a topic without read the answer !
Hi,
as it says, it is not an error, it's a warning.
It remings you to change your environment to a secure connection.
You do this here:
"Configuration / Global Settings / Security"
But only after your webserver is configured to support "https"
Otherwise you will not be able to access LimeSurvey.
Joffm
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.
- kordan
- Offline
- New Member
Less
More
- Posts: 6
- Thank you received: 0
2 years 10 months ago #217273
by kordan
Replied by kordan on topic SSL not enforced
I am sorry I am not able to let you understand.
I read, trust me.
and I even usually call my server using https.
And I also make use of the test link.
My question was asking for a reply like: "LimeSurvey check for this in the code. Maybe you forget this deatil."
I am sorry you can't understand.
I read, trust me.
and I even usually call my server using https.
And I also make use of the test link.
My question was asking for a reply like: "LimeSurvey check for this in the code. Maybe you forget this deatil."
I am sorry you can't understand.
The topic has been locked.
- DenisChenu
- Offline
- LimeSurvey Community Team
Less
More
- Posts: 13597
- Thank you received: 2487
2 years 10 months ago #217274
by DenisChenu
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
Replied by DenisChenu on topic SSL not enforced
It remings you to change your environment to a secure connection.
Then: set to yes …
Then: set to yes …
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.