Ryfujk

Sum letters are not two different

Trademark violation for app?

Tannaka duality for semisimple groups

Co-worker has annoying ringtone

How did Fremen produce and carry enough thumpers to use Sandworms as de facto Ubers?

Does the Mueller report show a conspiracy between Russia and the Trump Campaign?

A term for a woman complaining about things/begging in a cute/childish way

An adverb for when you're not exaggerating

Can the Flaming Sphere spell be rammed into multiple Tiny creatures that are in the same 5-foot square?

Draw 4 of the same figure in the same tikzpicture

Why does it sometimes sound good to play a grace note as a lead in to a note in a melody?

Putting class ranking in CV, but against dept guidelines

What order were files/directories output in dir?

How much damage would a cupful of neutron star matter do to the Earth?

Why are vacuum tubes still used in amateur radios?

Why do early math courses focus on the cross sections of a cone and not on other 3D objects?

How to run automated tests after each commit?

Do I really need to have a message in a novel to appeal to readers?

What does 丫 mean? 丫是什么意思？

Strange behavior of Object.defineProperty() in JavaScript

What is an "asse" in Elizabethan English?

What makes a man succeed?

How would a mousetrap for use in space work?

Why can't I install Tomboy in Ubuntu Mate 19.04?

Configure Firewalld for SSL on Fedora 29 Workstation

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}

0

I'm battling with firewalld and SSL on Fedora 29 workstation. I get a connection refused / can't Connect to server when I try and open an SSL connection to nginx.

If I stop firewalld with:

sudo systemctl stop firewalld

Then I connect using http and https from a remote system and get default Welcome to Nginx page.

If I start firewalld with

sudo systemctl start firewalld

Then I can connect using http but cannot connect using https and get a 'Can't connect to Server' error. So the issue seems be my firewalld configuration.

I had configured firewalld for http and https as follows:

>sudo firewall-cmd --set-default-zone=public

success

>sudo firewall-cmd --zone=public --add-service=https --permanent

success

>sudo firewall-cmd --zone=public --add-service=http --permanent

success

>sudo firewall-cmd --zone=public --add-masquerade --permanent

success

>sudo firewall-cmd --reload

success

so now:

>sudo firewall-cmd --get-default-zone

public

>sudo firewall-cmd --get-active-zones

public

  interfaces: ens33

>sudo firewall-cmd --list-all

public (active)

  target: default

  icmp-block-inversion: no

  interfaces: ens33

  sources: 

  services: dhcpv6-client http https mdns ssh

  ports: 

  protocols: 

  masquerade: yes

  forward-ports: 

  source-ports: 

  icmp-blocks: 

  rich rules: 

Which gets me to the point where https works but not https when firewalld is enabled.

I've tried turning off selinux with:

sudo setenforce 0

but same result- https connections are refused when firewalld is enabled.

I've also tried turning on firewalld logging, but even at log level 10 with all denied, I don't get an entry in the log, after firewalld has started, about the attempted connection.

I suspect that the issue here is my self-signed SSL cert which is known to nginx but not known to firewalld, but I can't seem to find anything that shows how to point firewalld to my CA cert.

Besides:

sudo systemctl disable firewalld

any suggestions to get firewalld to accept my SSL connections?

ssl fedora firewalld

share

asked 4 mins ago

mykmyk

101

New contributor

myk is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

0

I'm battling with firewalld and SSL on Fedora 29 workstation. I get a connection refused / can't Connect to server when I try and open an SSL connection to nginx.

If I stop firewalld with:

sudo systemctl stop firewalld

Then I connect using http and https from a remote system and get default Welcome to Nginx page.

If I start firewalld with

sudo systemctl start firewalld

Then I can connect using http but cannot connect using https and get a 'Can't connect to Server' error. So the issue seems be my firewalld configuration.

I had configured firewalld for http and https as follows:

>sudo firewall-cmd --set-default-zone=public

success

>sudo firewall-cmd --zone=public --add-service=https --permanent

success

>sudo firewall-cmd --zone=public --add-service=http --permanent

success

>sudo firewall-cmd --zone=public --add-masquerade --permanent

success

>sudo firewall-cmd --reload

success

so now:

>sudo firewall-cmd --get-default-zone

public

>sudo firewall-cmd --get-active-zones

public

  interfaces: ens33

>sudo firewall-cmd --list-all

public (active)

  target: default

  icmp-block-inversion: no

  interfaces: ens33

  sources: 

  services: dhcpv6-client http https mdns ssh

  ports: 

  protocols: 

  masquerade: yes

  forward-ports: 

  source-ports: 

  icmp-blocks: 

  rich rules: 

Which gets me to the point where https works but not https when firewalld is enabled.

I've tried turning off selinux with:

sudo setenforce 0

but same result- https connections are refused when firewalld is enabled.

I've also tried turning on firewalld logging, but even at log level 10 with all denied, I don't get an entry in the log, after firewalld has started, about the attempted connection.

I suspect that the issue here is my self-signed SSL cert which is known to nginx but not known to firewalld, but I can't seem to find anything that shows how to point firewalld to my CA cert.

Besides:

sudo systemctl disable firewalld

any suggestions to get firewalld to accept my SSL connections?

ssl fedora firewalld

share

asked 4 mins ago

mykmyk

101

New contributor

myk is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

I'm battling with firewalld and SSL on Fedora 29 workstation. I get a connection refused / can't Connect to server when I try and open an SSL connection to nginx.

If I stop firewalld with:

sudo systemctl stop firewalld

Then I connect using http and https from a remote system and get default Welcome to Nginx page.

If I start firewalld with

sudo systemctl start firewalld

Then I can connect using http but cannot connect using https and get a 'Can't connect to Server' error. So the issue seems be my firewalld configuration.

I had configured firewalld for http and https as follows:

>sudo firewall-cmd --set-default-zone=public

success

>sudo firewall-cmd --zone=public --add-service=https --permanent

success

>sudo firewall-cmd --zone=public --add-service=http --permanent

success

>sudo firewall-cmd --zone=public --add-masquerade --permanent

success

>sudo firewall-cmd --reload

success

so now:

>sudo firewall-cmd --get-default-zone

public

>sudo firewall-cmd --get-active-zones

public

  interfaces: ens33

>sudo firewall-cmd --list-all

public (active)

  target: default

  icmp-block-inversion: no

  interfaces: ens33

  sources: 

  services: dhcpv6-client http https mdns ssh

  ports: 

  protocols: 

  masquerade: yes

  forward-ports: 

  source-ports: 

  icmp-blocks: 

  rich rules: 

Which gets me to the point where https works but not https when firewalld is enabled.

I've tried turning off selinux with:

sudo setenforce 0

but same result- https connections are refused when firewalld is enabled.

I've also tried turning on firewalld logging, but even at log level 10 with all denied, I don't get an entry in the log, after firewalld has started, about the attempted connection.

I suspect that the issue here is my self-signed SSL cert which is known to nginx but not known to firewalld, but I can't seem to find anything that shows how to point firewalld to my CA cert.

Besides:

sudo systemctl disable firewalld

any suggestions to get firewalld to accept my SSL connections?

ssl fedora firewalld

share

asked 4 mins ago

mykmyk

101

New contributor

myk is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

sudo systemctl stop firewalld

sudo systemctl start firewalld

>sudo firewall-cmd --set-default-zone=public

success

>sudo firewall-cmd --zone=public --add-service=https --permanent

success

>sudo firewall-cmd --zone=public --add-service=http --permanent

success

>sudo firewall-cmd --zone=public --add-masquerade --permanent

success

>sudo firewall-cmd --reload

success

>sudo firewall-cmd --get-default-zone

public

>sudo firewall-cmd --get-active-zones

public

  interfaces: ens33

>sudo firewall-cmd --list-all

public (active)

  target: default

  icmp-block-inversion: no

  interfaces: ens33

  sources: 

  services: dhcpv6-client http https mdns ssh

  ports: 

  protocols: 

  masquerade: yes

  forward-ports: 

  source-ports: 

  icmp-blocks: 

  rich rules: 

sudo setenforce 0

sudo systemctl disable firewalld

share

asked 4 mins ago

mykmyk

101

New contributor

myk is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share

asked 4 mins ago

mykmyk

101

New contributor

myk is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked 4 mins ago

mykmyk

101

New contributor

myk is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked 4 mins ago

mykmyk

101