WebSockets, apache2 and https

Hi, I just installed OroCrm on my Ubuntu over https. My question is if there is a way to connect to the websocket server (clank) with this kind of installation.

A little more info:
On the same server, I got a simple chat app working with ClankBundle, but no https, and it works fine. After doing this, I tried to do the same thing but WITH https. To my surprise, the only way (I could find) to make this work is to use ProxyPass on apache.

So, what I ended up doing was connecting like this:

JavaScript

Clank.connect("wss://crm.mydomain.cl/websocket");

1	Clank.connect("wss://crm.mydomain.cl/websocket");

And adding this to the apache proxy_wstunnel.load:

Shell

ProxyPass "/websocket" "ws://localhost:8081/"

1	ProxyPass "/websocket"  "ws://localhost:8081/"

Of course, the socket server is running with that configuration, and the chat works.

Finally, the question is how can I tell orocrm to use the “/websocket” at the end of the connection string, or if there is another way to do this (other than working with nginx, which I know handles this)

Thanks a lot!

Topic

[Hryhorii HrebiniukParticipant]

Hello @amcastror,

You are doing right using proxy for this purpose. But instead of proxing by path ‘/websocket’, you have to proxy by port (8081 -> 8080) or host (secure.crm.mydomain.cl -> crm.mydomain.cl).

[amcastrorParticipant]

Thanks for the reply!

I’m assuming that only the websocket should use the proxy, not the entire site. That’s why I’m using the mod_proxy_wstunnel module and not the mod_proxy (maybe I have an error of concept). At the apache website for this module the information is very limited and doesn’t provide any information on how to work with (for example) ports.

Do you have any examples or references that I might use?

Thanks a lot again!

[adriwan_kenobyParticipant]

Hi @Hryhorii Hrebiniuk,

I have always the following message error on the js console of my browser:

Firefox ne peut établir de connexion avec le serveur à l’adresse wss://dev.orocrm.sinabs.fr/ws?ticket=5a8ed6463b3c88.30498366%3Badmin%3BZGFhZmE2MTVhMjNlNDEyNg%3D%3D%3B2018-02-22T15%3A40%3A06%2B01%3A00.

This not happen when I use http.

My configuration:

YAML

websocket_bind_address: 0.0.0.0 websocket_bind_port: 8080 websocket_frontend_host: '*' websocket_frontend_port: 443 websocket_frontend_path: 'ws' websocket_backend_host: '*' websocket_backend_port: 8080 websocket_backend_path: ''

1 2 3 4 5 6 7 8

websocket_bind_address: 0.0.0.0     websocket_bind_port: 8080     websocket_frontend_host: '*'     websocket_frontend_port: 443     websocket_frontend_path: 'ws'     websocket_backend_host: '*'     websocket_backend_port: 8080     websocket_backend_path: ''

And the appache config of the VHost:

<VirtualHost *:443> ServerAdmin nicolas@sinabs.fr ServerName dev.orocrm.sinabs.fr ServerAlias dev.orocrm.sinabs.fr DirectoryIndex app.php DocumentRoot /home/sinabs/sites/dev.orocrm.sinabs.fr/web <Directory /home/sinabs/sites/dev.orocrm.sinabs.fr/web> Options Indexes FollowSymLinks MultiViews AllowOverride all </Directory> ErrorLog /home/sinabs/logs/dev.orocrm.sinabs.fr-error.log LogLevel error CustomLog /home/sinabs/logs/dev.orocrm.sinabs.fr-access.log combined SSLCertificateFile /etc/letsencrypt/live/dev.orocrm.sinabs.fr/fullchain.pem SSLCertificateKeyFile /etc/letsencrypt/live/dev.orocrm.sinabs.fr/privkey.pem Include /etc/letsencrypt/options-ssl-apache.conf ProxyPass /ws http://0.0.0.0:8080 ProxyPassReverse /ws http://0.0.0.0:8080 </VirtualHost>

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

<VirtualHost *:443>   ServerAdmin nicolas@sinabs.fr   ServerName dev.orocrm.sinabs.fr   ServerAlias dev.orocrm.sinabs.fr   DirectoryIndex app.php   DocumentRoot /home/sinabs/sites/dev.orocrm.sinabs.fr/web   <Directory /home/sinabs/sites/dev.orocrm.sinabs.fr/web>     Options Indexes FollowSymLinks MultiViews     AllowOverride all   </Directory>   ErrorLog /home/sinabs/logs/dev.orocrm.sinabs.fr-error.log   LogLevel error   CustomLog /home/sinabs/logs/dev.orocrm.sinabs.fr-access.log combined   SSLCertificateFile /etc/letsencrypt/live/dev.orocrm.sinabs.fr/fullchain.pem   SSLCertificateKeyFile /etc/letsencrypt/live/dev.orocrm.sinabs.fr/privkey.pem   Include /etc/letsencrypt/options-ssl-apache.conf     ProxyPass /ws http://0.0.0.0:8080   ProxyPassReverse /ws http://0.0.0.0:8080 </VirtualHost>

I don’t understand which configuration I have to add to apache …

[Dmitriy PasechnikParticipant]

Hi

We have an examples of how to properly configure wss via reverse proxy using Nginx.
https://github.com/oroinc/platform/tree/master/src/Oro/Bundle/SyncBundle#configuration-of-secure-sslwss-connection

Check it, maybe it will help

[Author]

Replies