Can't install SSL for WAF.

aaP_kienvictory

Hello!
I am installing WAF and aapanel on my server and configuring it to run the website through an IP address instead of the domain as usual. Everything works fine if there is no SSL. When I install SSL, I encounter errors, so I manually configure the files in WAF to accept my SSL files. The configuration files are shown in the image below. Although the WAF login panel is running under SSL, it does not work when removing the WAF port. Please help me see if there is anything missing in any step or any other file.
Thank you very much.

aaPanel_Kern

Hello, aawaf will restore the default configuration after modifying the configuration. Please modify the configuration through the aawaf interface.

aaP_kienvictory

aaPanel_Kern
I have modified the json file for configuration, and restarted WAF, the configuration I captured is after I restarted WAF. I can't install ssl through the aawaf interface, it gives an error but doesn't specify what the error is, it seems to be having trouble creating ssl with the website in the form of an ip address. When I try creating a domain name, I don't get any errors. 🙁

ongmattroi

@aaPanel_Kern can you give your email or your contact information? We need your assistance.

aaPanel_Kern

Hello, this problem has not been reproduced yet. It is recommended that you check whether the domain name of the certificate is consistent with the domain name of the website?
Also check whether nginx is running normally
btw nginx_reload

ongmattroi

aaP_kienvictory

aaPanel_Kern
As you can see, this certificate is installed for the aawaf interface and it works as shown in picture 1 that I posted. It is made from zerossl and is expired. Can you help me when ssl is created through the aawaf interface, what settings and files will be recorded? I just need to know these files to be able to fix it. It seems like I'm still missing a certain file that I haven't found yet, so it's still missing in the 2nd picture, or the setting to the ssl port in the 3rd picture is incorrect. Please help me, I need it. If I can set up this entire section, I will share it here so you can use it as a document in the future.

aaPanel_Kern

Hello, I am not sure which files are there. I suggest you check what certificate is displayed by the browser? Try using incognito mode or changing browser access

aaP_kienvictory

aaPanel_Kern
I don't know what the problem is when installing ssl using an ip instead of a domain name, it has the following error and I check and see that the api is called to the address as shown in the second picture, perhaps due to some configuration that is not allowing it. allow this. Can you check again, this does not happen when creating ssl for aaWAF interface

aaPanel_Kern

aaP_kienvictory
Hi, can you give us your aawaf information? The server makes a snapshot backup first, if possible, please send it to kern@aapanel.com.
It is recommended to fill in the following
Post link:
SSH IP address, account password and port:
login link address and account password:

No post link will not be able to know which user's information is, and the problem will not be processed

aaP_kienvictory

aaPanel_Kern
I sent you the information via email, please check your inbox or spam folder. Thank you very much

aaPanel_Kern

Hello, it has been tested that this is caused by an error in your certificate configuration. Please configure the certificate correctly.
Configuration works fine using my certificate

aaP_kienvictory

aaPanel_Kern
Hello, it has been tested that this is caused by an error in your certificate configuration. Please configure the certificate correctly.
Configuration works fine using my certificate

aaP_kienvictory

aaPanel_Kern
It seems that it is not working, as you can see, when accessing the address https://178.128.50.113/ ssl does not work and still gets a warning.

aaPanel_Kern

Hello, please configure the certificate normally first. A normal certificate can display the IP or domain name.

aaP_kienvictory

aaPanel_Kern
Your certificate, as I see it, appears to be a domain-issued certificate. As I mentioned, the WAF operates with certificates generated for regular domain names. However, if it's an IP-issued certificate, it will encounter errors. The errors only occur in the SSL configuration of the website, while the SSL configuration of the WAF panel in image 2 shows no errors. I generated this SSL certificate based on an IP from zerossl, as shown in image 3, and I suspect that during the SSL setup for the website, it's not allowed to operate on the IP, resulting in the failure to obtain the certificate. I suggest configuring it similar to Aapanel or like the WAF settings.

aaPanel_Kern

Hello, if it cannot be used, it is recommended that you use the domain name certificate first

aaP_kienvictory

aaPanel_Kern
I have configured this SSL part already. I edited some records in the configuration file, and it's now functioning.