Force OpenKM to work under HTTPS

OpenKM has many interesting features, but requires some configuration process to show its full potential.
Forum rules
Please, before asking something see the documentation wiki or use the search feature of the forum. And remember we don't have a crystal ball or mental readers, so if you post about an issue tell us which OpenKM are you using and also the browser and operating system version. For more info read How to Report Bugs Effectively.
Post Reply
LauryMenton
Junior Boarder
Junior Boarder
Posts: 37
Joined: Sun Apr 07, 2019 12:23 am

Force OpenKM to work under HTTPS

Post by LauryMenton »

Hello community,

I just installed the docker container of OpenKM (Community Edition), and configured it to be able to work and load under HTTPS requests (+ SSL certificate), using a custom domain. It was installed as a Docker container in an unRAID server. The HTTPS and its SSL certificate was configured and created using Nginx Proxy Manager (docker container) and the free version (renew every 30 days) of no-ip service for the domain.

The domain seems to be working, like other container I have configured to be accessed under HTTPS connections. But, it stops redirecting subsequent calls once I pass the initial screen (enter user and password UI). Then, all the calls are under HTTP, not HTTPS. But, OpenKM stills working well.

I tried editing the 'application.url' field (Administration > Configuration), from http://#####/OpenKM/index.jsp to https://#####/OpenKM/index.jsp, but it seems to force HTTPS connections.

Thank you.
jllort
Moderator
Moderator
Posts: 11566
Joined: Fri Dec 21, 2007 11:23 am
Location: Sineu - ( Illes Balears ) - Spain
Contact:

Re: Force OpenKM to work under HTTPS

Post by jllort »

This is a network configuration, not an OpenKM configuraton issue.
First you should get working standard http with subdomain:
https://docs.openkm.com/kcenter/view/ok ... proxy.html
https://docs.openkm.com/kcenter/view/ok ... proxy.html

Then can try to install SSL with:
https://docs.openkm.com/kcenter/view/ok ... proxy.html
https://docs.openkm.com/kcenter/view/ok ... sltls.html ( or directly with tomcat )

Also a good option to automatically configure SSL with free and valid certificates ( only works with subdomain )
https://certbot.eff.org/instructions
Post Reply