node-solid-server icon indicating copy to clipboard operation
node-solid-server copied to clipboard

WebId-TLS can‘t work when behind Nginx

Open EurekaChen opened this issue 5 years ago • 6 comments

I built a WebId(https://eureka.name/profile/card#me ) using the Solid Server and Nginx as reverse proxy(ref solution 4:https://github.com/solid/node-solid-server/wiki/Running-Solid-behind-a-reverse-proxy), but if I Log in with Certificate(WebId-TLS), I always get a response of "504 Gateway Time-out" from Nginx. I guess the SSL certificate cannot reach the Solid Server or something else wrong, how to set Nginx, or should I modify some settings in config.json to run solid server, or solid server just have this issue?

EurekaChen avatar Feb 29 '20 09:02 EurekaChen

Can you post your config.json

bourgeoa avatar Feb 29 '20 09:02 bourgeoa

ok,full config.json:

{
  "root": "/home/ubuntu/Web/eureka.name/Pod/data",
  "port": "8443",
  "serverUri": "https://eureka.name",
  "webid": true,
  "mount": "/",
  "configPath": "/home/ubuntu/Web/eureka.name/Pod/config",
  "configFile": "/home/ubuntu/Web/eureka.name/Pod/config.json",
  "dbPath": "/home/ubuntu/Web/eureka.name/Pod/db",
  "sslKey": "/home/ubuntu/Certificate/eureka.name/eureka.name.key",
  "sslCert": "/home/ubuntu/Certificate/eureka.name/fullchain.cer",
  "multiuser": false,
  "server": {
    "name": "eureka.name",
    "description": "Eureka Chen's Pod",
    "logo": "https://res.chenyaojun.com/img/logo60x60.png"
  }
}

EurekaChen avatar Mar 02 '20 01:03 EurekaChen

You setmultiuser: false then there is no login. I am not sure that mono user can use SSL and https

bourgeoa avatar Mar 02 '20 02:03 bourgeoa

This is a known issue (and does not depend on the value of multiuser). Basically, behind an Nginx or similar reverse proxy, you can't really use webid-tls, you have to use oidc.

dmitrizagidulin avatar Mar 02 '20 03:03 dmitrizagidulin

@dmitrizagidulin Are there any plans to solve this issue?

EurekaChen avatar Apr 14 '20 10:04 EurekaChen

Is WebID-TLS currently working (without a proxy?)

melvincarvalho avatar Apr 09 '25 09:04 melvincarvalho