Horizon Dashboard Over HTTPS (IceHouse & Centos 6.5)
I'm trying to set up the dashboard to work over HTTPS however I am having trouble setting it up. I have been trying to follow the instructions ( http://docs.openstack.org/trunk/config-reference/content/configure-dashboard.html (http://docs.openstack.org/trunk/confi...) ) however they are applicable to Ubunutu and I can't seem to get it working for Centos.
The following is my /etc/httpd/conf.d/openstack-dashboard.conf:
#WSGIDaemonProcess dashboard
#WSGIProcessGroup dashboard
#WSGISocketPrefix run/wsgi
#
#WSGIScriptAlias /dashboard /usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi
#Alias /static /usr/share/openstack-dashboard/static
#
#<Directory /usr/share/openstack-dashboard/openstack_dashboard/wsgi>
# Order allow,deny
# Allow from all
#</Directory>
<VirtualHost xx.xx.xx.229:80>
ServerName xx.xx.xx.229.com
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
</IfModule>
<IfModule !mod_rewrite.c>
RedirectPermanent / https://xx.xx.xx.229.com
</IfModule>
</VirtualHost>
<VirtualHost xx.xx.xx.229:443>
ServerName xx.xx.xx.229.com
SSLEngine On
# Remember to replace certificates and keys with valid paths in your environment
SSLCertificateFile /etc/httpd/conf.d/SSL/dashboard.crt
SSLCACertificateFile /etc/httpd/conf.d/SSL/dashboard.crt
SSLCertificateKeyFile /etc/httpd/conf.d/SSL/dashboard.key
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
# HTTP Strict Transport Security (HSTS) enforces that all communications
# with a server go over SSL. This mitigates the threat from attacks such
# as SSL-Strip which replaces links on the wire, stripping away https prefixes
# and potentially allowing an attacker to view confidential information on the
# wire
Header add Strict-Transport-Security "max-age=15768000"
WSGIDaemonProcess dashboard
WSGIProcessGroup dashboard
#WSGISocketPrefix run/wsgi
WSGIScriptAlias /dashboard /usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi
Alias /static /usr/share/openstack-dashboard/static
<Directory /usr/share/openstack-dashboard/openstack_dashboard/wsgi>
Order allow,deny
Allow from all
</Directory>
</VirtualHost>
Accessing the site however results in a 404 (it does redirect to 443). Any ideas as to how I should fix this?
On RH system there is parameter in answer-file :-
CONFIG_HORIZON_SSL=y
I am not using pacstack.
1) Do you have this file /usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi 2) Add this line in your virtual host to get more details about the error.
Or you can look for the logs under /var/log/apache2
You may want to post the errors for /var/log/httpd/error.log. See what types of errors are coming back. Your redirect sends it to https but I'm not sure if you are appending the /dashboard to it.