Website not available with ssl/TLS enabled

My website suddenly isn’t available when tls/ssl (flexible) are enabled in Cloudflare tunnels. After signing in to https://emulate.SwoopingasaService.net , there is only a blank page.

SSwoopingbird My website suddenly isn’t available when tls/ssl (flexible) are enabled in Cloud...

Chaika•10/18/23, 4:02 PM

Only ever use Full (Strict). It doesn't matter for tunnels, but you should set it anyway

Chaika•10/18/23, 4:03 PM

We can't login, so can't exactly see that error. I would use dev tools (ctrl+shift+i) before logging in, check for any errors in console, and check the response details on the login request after you click sign in

CChaika We can't login, so can't exactly see that error. I would use dev tools (ctrl+shi...

SwoopingbirdOP•10/18/23, 5:18 PM

Hi, that’s what I did. It gave me source mapping errors. This wasn’t occurring about a week ago and I didn’t change anything. All signs point toward this being something to do with cf tunnels

SwoopingbirdOP•10/18/23, 5:19 PM

SSwoopingbird Hi, that’s what I did. It gave me source mapping errors. This wasn’t occurring a...

Chaika•10/18/23, 5:21 PM

Source map errors are harmless in and of themselves, it's just helpful for debug, some people strip them though because they reveal info about your code. If you scroll up above those, is there anything else?

SwoopingbirdOP•10/18/23, 5:23 PM

All I could find

SSwoopingbird All I could find

Chaika•10/18/23, 5:35 PM

If you open up dev tools before logging in, and then navigate to the network tab, and then click HTML on Firefox or Document on Chrome, you should be able to see a request with more info. I'd be curious of the status code and headers on it, I would just be very careful about not exposing anything sensitive because your login details are in that request (blur out any cookies/auth headers, don't show request body, etc)

Chaika•10/18/23, 5:40 PM

Could also check cloudflared logs to see if it's failing in some way,

journalctl -u cloudflared -f --lines=1000

journalctl -u cloudflared -f --lines=1000

if on systemd (Ubuntu, Debian, and derivs)

CChaika If you open up dev tools before logging in, and then navigate to the network tab...

SwoopingbirdOP•10/18/23, 6:10 PM

Status is 200

SwoopingbirdOP•10/18/23, 6:12 PM

Nothing in the logs on the cloudflare dashboard

SwoopingbirdOP•10/18/23, 6:16 PM

Nothing showing up when I put that command in

SSwoopingbird Nothing showing up when I put that command in

Chaika•10/18/23, 6:17 PM

if you're not logged in as root, probably need to prefix it with

sudo

sudo

, also has to be ran where cloudflared is running, and I'm assuming linux

SSwoopingbird Status is 200

Chaika•10/18/23, 6:17 PM

could be cache or something else, what was cf-cache-status on the response headers?

SwoopingbirdOP•10/18/23, 6:18 PM

There’s nothing in the logs at all

SwoopingbirdOP•10/18/23, 6:19 PM

Both on what’s hosting the site and where the proxy container lies

SwoopingbirdOP•10/18/23, 6:21 PM

I do notice in the headers section of dev tools, the cookie is set to http only

SwoopingbirdOP•10/18/23, 6:21 PM

Could that be the issue?

SwoopingbirdOP•10/18/23, 6:22 PM

Since this works perfectly fine without TLS

SwoopingbirdOP•10/18/23, 6:22 PM

SwoopingbirdOP•10/18/23, 6:29 PM

Ok so that fixed SOME of my issues. I allowed cookies from this site. Still getting a blank page, but it’s allowing the js plug-ins to function

SSwoopingbird I do notice in the headers section of dev tools, the cookie is set to http only

Chaika•10/18/23, 6:30 PM

http only just means only send the cookie over the headers, don't let it be accessible via Javascript

Chaika•10/18/23, 6:30 PM

nothing to do with http/https

SwoopingbirdOP•10/18/23, 6:30 PM

Only thing I see in dev tools now is my site is using same site attributes for _session and token

SwoopingbirdOP•10/18/23, 6:31 PM

It says to change Samesite to samesite=none

SwoopingbirdOP•10/18/23, 6:31 PM

Ok gotcha

SwoopingbirdOP•10/18/23, 6:33 PM

Nevermind back to square one now with source map errors

SSwoopingbird Since this works perfectly fine without TLS

Chaika•10/18/23, 6:36 PM

what do you mean it works without tls?

SwoopingbirdOP•10/18/23, 6:37 PM

I can login and access the site when the tunnel security setting is set to “off” versus strict or flexible

Chaika•10/18/23, 6:38 PM

You mean when you access the site over http, over the tunnel, it works, but not when you access the site over https, over the tunnel?

SwoopingbirdOP•10/18/23, 6:38 PM

Yes

Chaika•10/18/23, 6:38 PM

Sounds like your web server is misconfigured then

Chaika•10/18/23, 6:38 PM

What are your public hostname settings?

SwoopingbirdOP•10/18/23, 6:39 PM

no. Like I said, this was not an issue a week ago and I didn’t change anything. I even restored from a known working backup

SwoopingbirdOP•10/18/23, 6:43 PM

Also TLS verification is disabled

SSwoopingbird Also TLS verification is disabled

Chaika•10/18/23, 6:46 PM

What's your full public hostname settings?

Chaika•10/18/23, 6:46 PM

HTTPS, TLS Verification disabled?

SwoopingbirdOP•10/18/23, 6:47 PM

Yes

SwoopingbirdOP•10/18/23, 6:47 PM

And I’ve played around changing all of them already to try and get it to work

SSwoopingbird And I’ve played around changing all of them already to try and get it to work

Chaika•10/18/23, 6:48 PM

If you connect locally, not going through the tunnel (if possible), does it work, over both http and https?

SwoopingbirdOP•10/18/23, 6:48 PM

Just via the IP address? Yes

Chaika•10/18/23, 6:49 PM

using http or https?

SwoopingbirdOP•10/18/23, 6:52 PM

Both. Perhaps a domain name issue or something?

Chaika•10/19/23, 1:10 AM

yea, could be related, some apps aren't made to be accessed over a reverse proxy. I pulled it down just to test and was unable to get it working at all over the tunnel, could only login locally, the auth process is a bit odd with the redirects, and it seems only really made for local access, with zero other config options.

It looks like it was getting stuck in the main app controller setup, it calls /api/auth but never moves on, I'm guessing it's swallowing an exception internally somewhere. Could try reaching out to the devs of it, explaining you're trying to run it behind a reverse proxy and running into something weird, or you could try WARP Private Networking which would stlil give you remote access, more difficult to setup though and requires installing/running WARP in the background

SwoopingbirdOP•10/19/23, 8:45 PM

yikes. yeah i can let them know, but this was working a week or so ago so i cant imagine its an issue with the site/app. I did mention it to them when it initially happened, but didn't get a response back for any fixes

Website not available with ssl/TLS enabled

Similar Threads

Similar Threads

Similar Threads