Nethserver-discourse, Let's Encrypt, and SSL

Support
27

Hi @stephdl,

  1. I started LOCAL VM.
  2. On main server, I copied /etc/httpd/conf.d/virtualhosts.conf to /etc/httpd/conf.d/u_nocanon.conf.
  3. I kept the original virtualhosts.conf as is.
  4. In u_nocanon.conf I deleted all sections not related to the redirections.
    I added nocanon after retry=30 in all sections.
  5. On main server, I restarted httpd.
  6. On LOCAL VM, I restarted httpd and matrix-synapse.
  • I logged into my LOCAL Chat server with Firefox.
  • I logged into matrix.org with Chrome.
  • On my LOCAL Chat server, I created an encrypted public Room.
  • On my connection to matrix.org, I Search for the created Room on LOCAL Chat server => Join.
  • My connection to matrix.org joined the Room on LOCAL Chat server without problem (which is a Première).
  • Exchange a few chats between my Chat and matrix.org => both were fast to display the exchanges.

CONCLUSION:
It is the web redirections that canonicalise (replacing the characters) %40 , the %3A , etc…

QUESTION:
Is it possible to do the same with this directive parameter as you did with X-Forwarded-Proto ?
Might be quite tricky as it is a parameter and not a full directive… But since you are adding max=3 and retry=30 parameters only in redirection sections, can you also add nocanon ?

Michel-André

2 Likes