(08-13-2017, 07:17 AM)dsmarter Wrote: I've got the Apache Port set to 443. All other domains have an overwritten Virtual Host Settings that forward to 443 and point towards the certificate. However, I can't seem to get a single domain to not try to redirect to port 80.
Apache service port should not be set to 443. It should always be 80 otherwise none of your non-ssl sites will work. All you need to do is change that back to 80 (From the command line as root you can enter: setso --set apache_port 80). If you are using SSL for your panel login, you change Sentora Apache Port to 443 and add your SSL information for the panel login in Global Sentora Entry adding a port forward at the end:
Code:
SSLEngine on
SSLProtocol ALL -SSLv2 -SSLv3
SSLHonorCipherOrder On
SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
SSLCertificateFile /etc/letsencrypt/live/cp.xxxxxx.com/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/cp.xxxxxx.com/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/cp.xxxxxx.com/chain.pem
# Keeping below for future upgrades.
# Requires Apache >= 2.4
SSLCompression off
</virtualhost>
# PORT FORWARD FROM 80 TO: 443
<virtualhost *:80>
ServerName cp.xxxxxx.com
ServerAdmin postmaster@xxxxxx.com
Redirect permanent / https://cp.xxxxxx.com/
For your other domains, you select them in the custom vhost section and set port override: 443 then check Forward Port 80 to Overriden Port and add your SSL information in the Custom Entry box:
Code:
SSLEngine on
SSLProtocol ALL -SSLv2 -SSLv3
SSLHonorCipherOrder On
SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
SSLCertificateFile /etc/letsencrypt/live/xxxxxx.com/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/xxxxxx.com/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/xxxxxx.com/chain.pem
# Keeping below for future upgrades.
# Requires Apache >= 2.4
SSLCompression off