Score:0

Apache Guacamole working fine over HTTP, but not over HTTPS

us flag

I've recently installed Apache Guacamole on Ubuntu 20.04 LTS and use NGINX as the proxy server. Everything works fine with it over HTTP but when I use HTTPS, the application still loads, but then the connections are super slow (get stuck for some seconds). About configuration, I've exactly done what the official documentation says and all the services run on the same server.

EDIT: NGINX Configuration:

server {
    listen 80;
    server_name  guac.example.com;
    return 301 https://$host$request_uri;
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /usr/share/nginx/html;
    }
}

server {
    listen 443 ssl;
    server_name  guac.example.com;
    ssl_certificate /etc/ssl/certs/guacamole.crt;
    ssl_certificate_key /etc/ssl/private/guacamole.key;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers HIGH:!aNULL:!MD5;
    location / {
        proxy_pass http://localhost:8080/guacamole/;
        proxy_buffering off;
        proxy_http_version 1.1;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $http_connection;
        proxy_cookie_path /guacamole/ /;
        access_log off;
    }
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /usr/share/nginx/html;
    }
}

EDIT: As of the official documentation, the application uses WebSockets by default, but it will use HTTP requests if the WebSocket protocol is unavailable.

Any help is appreciated.

djdomi avatar
za flag
Questions seeking installation, configuration or diagnostic help must include the desired end state, the specific problem or error, sufficient information about the configuration and environment to reproduce it, and attempted solutions. Questions without a clear problem statement are not useful to other readers and are unlikely to get good answers. - so show us, apache and nginx config i see the edit -> do you really want to have http and https at the same time?
MBiabanpour avatar
us flag
No, @djdomi , I just need `HTTPS`, so I'll redirect `HTTP` to `HTTPS` later.
djdomi avatar
za flag
@mbianpour nope, the current shown config does not redirect in any kind, it would only held "`return 301 https://$host$request_uri;` for a 80 to 443 redirect
djdomi avatar
za flag
join the chat to short the way https://chat.stackexchange.com/rooms/126791/thechat
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.