Disable HTTPS

Reply
L1 Bithead

Disable HTTPS

I am running pfBlockerNG.

It cannot connect to Minemeld because of the self-signed certificate.

This is for my home, so I don't have a signed certificate to use.

Is it possible to simply disable SSL on the web server so I can get past the cert error?

 

Thanks

L7 Applicator

Re: Disable HTTPS

Hi @jonjon,

you can disable HTTPS by tweaking the nginx config in /etc/nginx/sites-enabled/minemeld-web, but I would strongly recommend against this for security reasons. Couldn't you create a new CA and a new certificate for MineMeld and add the CA to the list of trusted CAs of pfBlockerNG instead ? 

L1 Bithead

Re: Disable HTTPS

I remarked out the https redirect and was able to the main page to run without encryption.

However, I still could not get to the feeds pages without doing https.

 

I don't know how to add trusted CAs to pfblockerng to work that angle.

 

I really only need the feeds pages to be unencrypted.

 

If that can only be acheived by unencyrpting the entire site, I'm not worried about the lost security. This is only for my home. And if someone is actually sniffing my packets or MitM on my home network, I've far far bigger problems than any data exposed from Minemeld.

 

L7 Applicator

Re: Disable HTTPS

Hi @jonjon,

DISCLAIMER: do this only for testing and only if it is really needed, never never in production !

 

Easy way is editing /etc/nginx/sites-enabled/minemeld-web file and change the first lines. Comment out the first server stanza, and change the server stanza to listen on port 80 with no ssl:

upstream app_server {
server 127.0.0.1:5000 fail_timeout=0;
}

# server { # listen 80; # server_name ~(.+)$; # return 301 https://$1$request_uri; # } server { listen 80;
[...]

And then:

$ sudo service nginx restart
L1 Bithead

Re: Disable HTTPS

I tried this.

The result is:

http://server/feeds/inboundfeedhc  is not accessible at all.

Auhtentication fails when trying to log in to the main page.

 

 However, I found the answer.

Turns out pfblockerng has a state setting, "FLEX", to downgrade the SSL.

 

It's working now. Thanks for the help.

L0 Member

Re: Disable HTTPS

Hi, may I know how do you downgrade the SSL.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!