Hello!
I have the problem that I cannot open any documents with an active SSL connection. I’ve already read some information about the problem, but I haven’t been able to solve the problem yet.
Document Server version: Docs Enterprise 7.3.3
OS: Debian 11.7
I was able to install it following the instructions: helpcenter.onlyoffice.com/de/installation/docs-enterprise-install-ubuntu.aspx
I can reach the server via http and work in the test environment.
Using this guide I made the https conversion:
helpcenter.onlyoffice.com/de/installation/docs-community-https-linux.aspx
I just had to take the template file and store our certificates accordingly.
After the restart I can reach the page via https.
When I call the test environment, I can’t open any documents.
From the log files I have gathered that the certificate cannot be checked.
However, changing the “rejectUnauthorized” parameter (/etc/onlyoffice/documentserver/default.json) and restarting the services does not solve the problem.
I looked at the nginx examples on github. But that doesn’t get me to my goal.
I haven’t really found any other solution.
nginx congiuration file
include /etc/nginx/includes/http-common.conf;
## Normal HTTP host
server {
listen 0.0.0.0:80;
listen [::]:80 default_server;
server_name _;
server_tokens off;
set $secure_link_secret verysecretstring;
## Redirects all traffic to the HTTPS host
root /nowhere; ## root doesn't have to be a valid path since we are redirecting
rewrite ^ https://$host$request_uri? permanent;
}
#HTTP host for internal services
server {
listen 127.0.0.1:80;
listen [::1]:80;
server_name localhost;
server_tokens off;
set $secure_link_secret verysecretstring;
include /etc/nginx/includes/ds-common.conf;
include /etc/nginx/includes/ds-docservice.conf;
}
## HTTPS host
server {
listen 0.0.0.0:443 ssl;
listen [::]:443 ssl default_server;
server_tokens off;
set $secure_link_secret verysecretstring;
root /usr/share/nginx/html;
## Strong SSL Security
## https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html
ssl on;
ssl_certificate /etc/nginx/ssl/onlyoffice/crt/onlyoffice.pem;
ssl_certificate_key /etc/nginx/ssl/onlyoffice/key/onlyoffice.key;
# Uncomment string below and specify the path to the file with the password if you use encrypted certificate key
# ssl_password_file {{SSL_PASSWORD_PATH}};
ssl_verify_client off;
ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
ssl_protocols TLSv1.2;
ssl_session_cache builtin:1000 shared:SSL:10m;
ssl_prefer_server_ciphers on;
add_header Strict-Transport-Security max-age=31536000;
# add_header X-Frame-Options SAMEORIGIN;
add_header X-Content-Type-Options nosniff;
include /etc/nginx/includes/ds-*.conf;
}