Login failure after installing SSL

Yeti-Switch
1

Hello

Can someone help with login issue?

I’ve installed yeti-client, cerbot to get ssl. Client login works fine, but admin login crashed. I turned off ssl, created new admin user for test, enable ssl again - still no luck. Yeti says that login/pass are incorrect.

Will be appriciate for help

2

but admin login crashed

still no luck.

What does it mean? Could you share some technical(like logs, screenshots) details? Also usually all such problems caused by incorrect nginx configuration which also was not provided.

3

That’s my nginx conf

upstream ts {
server 127.0.0.1:80;
}
upstream ds {
server 127.0.0.1:80;
}

upstream yeti-unicorn {
server unix:/run/yeti/yeti-unicorn.sock;
}

#server {

listen 80;

server_name fckbunny.website www.fckbunny.website;

root /opt/yeti-web;

access_log /var/log/nginx/yeti-web.access.log;

location / {

rewrite ^/(.*) https://localhost$request_uri? permanent;

}

#}

server {
listen 127.0.0.1:6666;
server_name _;

    proxy_redirect off;
    proxy_set_header Host $host;
    proxy_set_header X-Proxy-Port $proxy_port;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $remote_addr;
    proxy_set_header HTTP_CLIENT_IP $remote_addr;
    proxy_set_header HTTP_X_FORWARDED_FOR $remote_addr;
    client_max_body_size        100m;
    client_body_buffer_size     128k;
    proxy_connect_timeout       100;
    proxy_send_timeout          20000;
    proxy_read_timeout          20000;
    proxy_buffer_size           32k;
    proxy_buffers               8 32k;
    proxy_busy_buffers_size     64k;
    proxy_temp_file_write_size  640k;

    allow 127.0.0.1;
    deny all;

    location /api/rest/system/jobs {
            allow 127.0.0.1;
            deny all;
            proxy_pass  http://yeti-unicorn;
    }

    location /api/rest/system {
            allow 127.0.0.1;
            deny all;
            proxy_pass  http://yeti-unicorn;
    }

    location /api/rest/admin {
            allow 127.0.0.1;
            deny all;
            proxy_pass  http://yeti-unicorn;

            if ($request_method = 'OPTIONS') {
                    add_header 'Access-Control-Allow-Origin' '*';
                    add_header 'Access-Control-Allow-Headers' 'Origin, X-Requested-With, Content-Type, Accept, api_key, Authorization';
                    add_header 'Access-Control-Allow-Methods' 'GET, POST, DELETE, PUT, PATCH, OPTIONS';
                    add_header 'Access-Control-Max-Age' 1728000;
                    add_header 'Content-Type' 'text/plain charset=UTF-8';
                    add_header 'Content-Length' 0;
                    return 204;
            }
            add_header 'Access-Control-Allow-Origin' '*';
            add_header 'Access-Control-Allow-Headers' 'Origin, X-Requested-With, Content-Type, Accept, api_key, Authorization';
            add_header 'Access-Control-Allow-Methods' 'GET, POST, DELETE, PUT, PATCH, OPTIONS';
            add_header 'Access-Control-Allow-Credentials' 'true';

    }

    location /api/rest/customer {
            allow 127.0.0.1;
            deny all;
            proxy_pass  http://yeti-unicorn;

            if ($request_method = 'OPTIONS') {
                    add_header 'Access-Control-Allow-Origin' '*';
                    add_header 'Access-Control-Allow-Headers' 'Origin, X-Requested-With, Content-Type, Accept, api_key, Authorization';
                    add_header 'Access-Control-Allow-Methods' 'GET, POST, DELETE, PUT, PATCH, OPTIONS';
                    add_header 'Access-Control-Max-Age' 1728000;
                    add_header 'Content-Type' 'text/plain charset=UTF-8';
                    add_header 'Content-Length' 0;
                    return 204;
            }
            add_header 'Access-Control-Allow-Origin' '*';
            add_header 'Access-Control-Allow-Headers' 'Origin, X-Requested-With, Content-Type, Accept, api_key, Authorization';
            add_header 'Access-Control-Allow-Methods' 'GET, POST, DELETE, PUT, PATCH, OPTIONS';
            add_header 'Access-Control-Allow-Credentials' 'true';

    }

}

server {

listen 443;

    server_name my.website www.my.website;

ssl on;

ssl_certificate /etc/nginx/ssl/localhost.crt;

ssl_certificate_key /etc/nginx/ssl/localhost.key;

ssl_session_timeout 50m;

ssl_session_cache builtin:1000;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;# SSLv3;

ssl_ciphers ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!AESGCM;

add_header Strict-Transport-Security “max-age=31536000; includeSubdomains”;

ssl_prefer_server_ciphers on;

    access_log /var/log/nginx/yeti-web.access.log;

    location ~* /\.ht {
            deny  all;
    }
    location ~ /.svn {
            deny all;
    }
    location ~ /.git {
            deny all;
    }
    location /favicon.ico {
            deny all;
    }
    location /assets {
            root /opt/yeti-web/public;
            expires 5h;
    }
    location /swagger {
            expires 5h;
    }

    location /doc {
            root /opt/yeti-web;
            try_files $uri $uri/index.html /doc/index.html;
    }

    location /images {
            root /opt/yeti-web/public;
            expires 5h;
    }
    root /opt/yeti-web/public;

    location /api/ {
                    deny all;
    }


    location / {
            proxy_pass  http://yeti-unicorn;
            proxy_redirect off;
            proxy_set_header Host $host;
            proxy_set_header X-Proxy-Port $proxy_port;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $remote_addr;
            proxy_set_header HTTP_CLIENT_IP $remote_addr;
            proxy_set_header HTTP_X_FORWARDED_FOR $remote_addr;
            client_max_body_size        100m;
            client_body_buffer_size     128k;
            proxy_connect_timeout       100;
            proxy_send_timeout          20000;
            proxy_read_timeout          20000;
            proxy_buffer_size           32k;
            proxy_buffers               8 32k;
            proxy_busy_buffers_size     64k;
            proxy_temp_file_write_size  640k;
    }

    location ~ ^/dump/(.*)$ {
            internal;
            set $filename $1;
            proxy_hide_header Content-Disposition;
            add_header Content-Disposition 'attachment; filename="$filename"';

            proxy_pass http://ts;
            proxy_next_upstream http_404;
            proxy_redirect off;
            proxy_set_header Host $host;
            proxy_set_header X-Proxy-Port $proxy_port;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $remote_addr;
            proxy_set_header HTTP_CLIENT_IP $remote_addr;
            proxy_set_header HTTP_X_FORWARDED_FOR $remote_addr;
            client_max_body_size        100m;
            client_body_buffer_size     128k;
            proxy_connect_timeout       100;
            proxy_send_timeout          20000;
            proxy_read_timeout          20000;
            proxy_buffer_size           32k;
            proxy_buffers               8 32k;
            proxy_busy_buffers_size     64k;
            proxy_temp_file_write_size  640k;
    }

    location /tmexport/ {
            proxy_pass http://ds;
            proxy_next_upstream http_404;
            proxy_redirect off;
            proxy_set_header Host $host;
            proxy_set_header X-Proxy-Port $proxy_port;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $remote_addr;
            proxy_set_header HTTP_CLIENT_IP $remote_addr;
            proxy_set_header HTTP_X_FORWARDED_FOR $remote_addr;
            client_max_body_size        100m;
            client_body_buffer_size     128k;
            proxy_connect_timeout       100;
            proxy_send_timeout          20000;
            proxy_read_timeout          20000;
            proxy_buffer_size           32k;
            proxy_buffers               8 32k;
            proxy_busy_buffers_size     64k;
            proxy_temp_file_write_size  640k;
    }

listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/my.website/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/my.website/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}

server {
if ($host = www.my.website) {
return 301 https://$host$request_uri;
} # managed by Certbot

if ($host = my.website) {
    return 301 https://$host$request_uri;
} # managed by Certbot


    listen 80;
    server_name my.website www.my.website;
return 404; # managed by Certbot

}

server {
listen 80;
server_name user.my.website;
root /opt/yeti-client/dist;
access_log /var/log/nginx/yeti-client.access.log;

    location / {
            rewrite ^/(.*) https://user.fckbunny.website permanent;
    }

}

server {
listen 443;
server_name user.my.website;

    ssl on;
    ssl_certificate /etc/letsencrypt/live/my.website/fullchain.pem; # managed by Certbot    
    ssl_certificate_key /etc/letsencrypt/live/my.website/privkey.pem; # managed by Certbot

    ssl_session_timeout 50m;
    ssl_session_cache builtin:1000;
    ssl_protocols TLSv1.2;
    ssl_ciphers  ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!AESGCM;
    add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";
    ssl_prefer_server_ciphers on;

    access_log /var/log/nginx/yeti-client.access.log;

    root /opt/yeti-client/dist;

    index index.html;
    
    location / {
    }

When i try to login to admin panel i’m getting this error

изображение

4

It is impossible to read. Use markdown please.