It wasn't a popup browse window that you could use to locate the file with?
3 Likes
Yes but it would change the path.
Are you able to see if port 443 is securely working now?
Bingo!
curl -Ii https://www.ellisaircraft.com/
HTTP/1.1 302 Found
Date: Fri, 17 Mar 2023 18:43:00 GMT
Server:
Location: /ui/core/index.html
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' blob: *.live.com *.amazonaws.com *.core.windows.net www.google.com http://127.0.0.1:34320/v1/fileassociations *.autodesk.com; style-src 'unsafe-inline' 'self' *.autodesk.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' www.google.com www.gstatic.com teams.microsoft.com *.teams.microsoft.com *.skype.com *.autodesk.com; frame-src 'self' www.google.com *.live.com docs.google.com accounts.google.com; font-src 'self' data: *.autodesk.com; img-src www.gstatic.com 'self' data: blob: *.duosecurity.com *.live.com *.amazonaws.com *.core.windows.net *.office.net *.autodesk.com; frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.my.salesforce.com; worker-src 'self' blob: *.autodesk.com
Cache-Control: no-cache="Set-Cookie"
Content-Type: text/html; charset=UTF-8
3 Likes
And using the online tool SSL Server Test (Powered by Qualys SSL Labs) show it is working as well.
Results here SSL Server Test: www.ellisaircraft.com (Powered by Qualys SSL Labs)
2 Likes
Very well, indeed: A+
If I had to give any critique [room for improvement], I would improve on this:
2 Likes
You all have been super helpful. Please recognize my appreciation. Yes its working perfect. Now I can start opening up the folders on the server for myself and two others remotely using the Filecloud app on our iPhones.
2 Likes
Well supported forum with lots of depth and knowledge. Thanks all!
2 Likes
One last question.
Receive "Not Secure" errors when accessing the admin user interface on LAN. How can I fix this?
You're connecting to the IP address of the host. The localhost IP address to be exact. Let's Encrypt doesn't issue certs for IP addresses (yet) in general anyway, but especially no publicly trusted CA is allowed to issue certs for the localhost IP address in the first place.
3 Likes
Ah okay. So the same is true from another PC on the same lan using the servers ip address such as using a web browser from this laptop
192.168.1.2
Using ellisaircraft.com from LAN PC's I'm getting time out errors
Probably because port 80 isn't reachable now. If you manually use https:// in front of it, it works.
3 Likes
For the LAN you need ellisaircraft.com to map to an IP Address accessible to the LAN (that could be a different IP Address than the Public Facing Internet one).
I see 2 basic choices:
- The LAN can access the Public Facing Internet IP Address (this goes out and back in)
- Two different IP Addresses for ellisaircraft.com one on the LAN (i.e. 192.168.1.2) for the LAN only and one for the Public Facing Internet for the Internet only.
2 Likes
When I use ellisaircraft.com on any PC in the Local Area Network....including the 2016 server box... I'm receiving time out errors.
Not a big deal but I was hopeful to be able to login to filecloud and tweak the settings from any PC in my home/office.
Also if you use https://ellisaircraft.com/ ?
2 Likes
Because, as @Osiris said
You will always need to use HTTPS https://www.ellisaircraft.com or https://ellisaircraft.com, everywhere.
1 Like
Well, ideally port 80 would be open and HTTP would redirect to HTTPS...
3 Likes
Works fine from any PC using that.
Duh. I was simply typing in ellisaircraft.com into a browser and getting time out errors. Using the HTTPS:// in front results in perfect UI on all LAN browsers. Thanks so much. Again a very well supported Forum.
3 Likes
Yes, but the OP wanted close and from my location Port 80 is close their domain.
$ nmap -Pn www.ellisaircraft.com
Starting Nmap 7.80 ( https://nmap.org ) at 2023-03-17 22:15 UTC
Nmap scan report for www.ellisaircraft.com (68.42.15.212)
Host is up (0.091s latency).
rDNS record for 68.42.15.212: c-68-42-15-212.hsd1.tn.comcast.net
Not shown: 999 filtered ports
PORT STATE SERVICE
443/tcp open https
Nmap done: 1 IP address (1 host up) scanned in 11.11 seconds
1 Like
Then we'll probably see OP back on this Community in about 3 months when it's time to renew the cert I guess.
(And OP probably should read Best Practice - Keep Port 80 Open - Let's Encrypt )
4 Likes
But I never did close port 80 I simply remarked out listen to port 80 in the apache config file
httpd.conf