https without certificate redirects to panel

[iraqiboy90]

Hello

I've seen this issue before but I somehow forgot about it or ignored it. Now when testing again, this issue popped up again, but this is not a configuration issue by me, I think.

So, I have certbot and multiple domains with SSL configured and they work fine. Both https and http redirects normally to the https domain itself.
but
a domain without a certificate and no ssl-related configuration works fine with http and redirects to the domain, BUT, when adding https to the same domain, it redirects to the sentora panel instead after the browser warns of a non-trusted self signed certificate.

Why? How can I diagnose this?

Regards
iraqiboy90

[iraqiboy90]

bump?

[iraqiboy90]

Any support on this one please?

[Me.B]

Without seeing the conf file we can't help.

Please avoid DM for support. You will be ignored next time.

[iraqiboy90]

Thanks for the reply.

Please avoid DM for support. You will be ignored next time.

I will avoid it next time

Here are the two apache conf files within sentora config folder:

httpd.conf

Code:

# Sentora Apache Include file
# Written by Bobby Allen, 15/05/2011

# Set the Sentora Alias (used for development, sable will eventually use a VHOST)

#Alias

/Sentora /etc/sentora/panel

# Set a default server name for the master configuration to supress Apache daemon warnings
ServerName localhost

# Setup the directory settings and PHP security flags for the Sentora application directory.
<Directory /etc/sentora/panel>
   Options +FollowSymLinks
   DirectoryIndex index.php
   <IfModule mod_php5.c>
       AddType application/x-httpd-php .php
       php_flag magic_quotes_gpc Off
       php_flag track_vars On
       php_flag register_globals Off
       php_admin_value upload_tmp_dir /var/sentora/temp
   </IfModule>
</Directory>

# Disallow web access to directories that don't need it/that we don't want people looking in!
<Directory /etc/sentora/panel/cnf/>
   Require all denied
</Directory>
<Directory /etc/sentora/panel/modules/*/hooks>
   Require all denied
</Directory>

# Set server tokens
ServerTokens Prod

# Now we include the generic VHOST configuration file that holds all Sentora user hosted vhost data
Include /etc/sentora/configs/apache/httpd-vhosts.conf

And this is the httpd-vhosts.conf (too long to be pasted here)

Code:

https://pastebin.com/f2PvQJZv

The problem happens with domain delta.no. Since this is the only domain I can test that does not have a SSL configuration on. I'm connecting to it by changing the windows host file to direct the domain to the IP of the server this conf file is located at, because it's actually located somewhere else with DNS.

Domain names has been changed for what I assume can be a slightly privacy improvement, since this is a public forum

[iraqiboy90]

Still an issue

[Jettaman]

Still an issue

Please attach your httpd-vhosts.conf file. I will see if I can help you quickly.

[iraqiboy90]

Please attach your httpd-vhosts.conf file. I will see if I can help you quickly.

It's the same one in my previous comment https://pastebin.com/f2PvQJZv
But can send you the uncensored one in PM

[iraqiboy90]

I think I found the issue. It has something to do with cloudflare. Pretty stupid from my part I think.


A new domain added to cloudflare gets this option automatically enabled. It's obvious that this needs to be disabled since the domain is not running an SSL.

Changing it to semi-disabled is enough for my case since this domain gets redirected by sentora to another domain.

[iraqiboy90]

nevermind. The problem is still there.... Cloudflare is not managing the DNS with this new test...

I'm going to do a new install of centos and sentora on a vm to test...