<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
I have loncapa running on an Azure/Linux/Ubuntu 16 vm for the domain loncapa.winona.edu. </div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
In December, with lots of help from Stuart, I got certbot up and running on the machine. Certbot provides a free SSL certificate, which is required for https.</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
Last week, I tried to renew my ssl certificate with certbot. "certbot renew" failed.</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
The proper way (I learned today) to renew your certbot certificate in Ubuntu 16 is to include the following command-line arguments:</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
</div>
<span style="display: inline !important; color: rgb(176, 0, 0); font-family: Calibri; font-size: 15px; font-size-adjust: none"> certbot run -a webroot -i apache -w /home/httpd/html/ -d loncapa.winona.edu</span><br style="border-bottom-color: rgb(176, 0, 0); border-left-color: rgb(176, 0, 0); border-right-color: rgb(176, 0, 0); border-top-color: rgb(176, 0, 0); color: rgb(176, 0, 0); font-family: Calibri; font-size: 15px; font-size-adjust: none; margin-bottom: 0px; margin-top: 0px">
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
Now, question: Right now my loncapa site accepts http or https connections. Since certbot seems to be working reliably, it seems like a good idea to force redirects from
<a id="LPNoLP330129" href="http://loncapa.winona.edu">http://loncapa.winona.edu</a> to
<a id="LPNoLP307415" href="https://loncapa.winona.edu">https://loncapa.winona.edu</a> <br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
The "hack" way of doing this is to directly edit the vhost file with the lines, </div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
<span style="color: teal; font-family: Consolas, Menlo, Monaco, "Lucida Console", "Liberation Mono", "DejaVu Sans Mono", "Bitstream Vera Sans Mono", "Courier New", monospace; font-size: 15px; text-align: start"><span>RewriteEngine</span></span><span style="color: rgb(51, 51, 51); font-family: Consolas, Menlo, Monaco, "Lucida Console", "Liberation Mono", "DejaVu Sans Mono", "Bitstream Vera Sans Mono", "Courier New", monospace; font-size: 15px; text-align: start; background-color: rgb(249, 249, 249); display: inline !important"> </span><span style="color: rgb(51, 51, 51); font-family: Consolas, Menlo, Monaco, "Lucida Console", "Liberation Mono", "DejaVu Sans Mono", "Bitstream Vera Sans Mono", "Courier New", monospace; font-size: 15px; text-align: start">on</span></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
<span style="color: rgb(51, 51, 51); font-family: Consolas, Menlo, Monaco, "Lucida Console", "Liberation Mono", "DejaVu Sans Mono", "Bitstream Vera Sans Mono", "Courier New", monospace; font-size: 15px; text-align: start"></span><span style="color: rgb(51, 51, 51); font-family: Consolas, Menlo, Monaco, "Lucida Console", "Liberation Mono", "DejaVu Sans Mono", "Bitstream Vera Sans Mono", "Courier New", monospace; font-size: 15px; text-align: start; background-color: rgb(249, 249, 249); display: inline !important"></span><span style="color: teal; font-family: Consolas, Menlo, Monaco, "Lucida Console", "Liberation Mono", "DejaVu Sans Mono", "Bitstream Vera Sans Mono", "Courier New", monospace; font-size: 15px; text-align: start"><span>RewriteRule</span></span><span style="color: rgb(51, 51, 51); font-family: Consolas, Menlo, Monaco, "Lucida Console", "Liberation Mono", "DejaVu Sans Mono", "Bitstream Vera Sans Mono", "Courier New", monospace; font-size: 15px; text-align: start; background-color: rgb(249, 249, 249); display: inline !important"> ^
https://</span><span style="color: teal; font-family: Consolas, Menlo, Monaco, "Lucida Console", "Liberation Mono", "DejaVu Sans Mono", "Bitstream Vera Sans Mono", "Courier New", monospace; font-size: 15px; text-align: start">%{SERVER_NAME}</span><span style="color: teal; font-family: Consolas, Menlo, Monaco, "Lucida Console", "Liberation Mono", "DejaVu Sans Mono", "Bitstream Vera Sans Mono", "Courier New", monospace; font-size: 15px; text-align: start">%{REQUEST_URI}</span><span style="color: rgb(51, 51, 51); font-family: Consolas, Menlo, Monaco, "Lucida Console", "Liberation Mono", "DejaVu Sans Mono", "Bitstream Vera Sans Mono", "Courier New", monospace; font-size: 15px; text-align: start"> [END,QSA,R=permanent]</span><br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
Q1: I see some relevant files in /etc/apache2 Can I just edit them directly? </div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
<span>:/etc$ grep RewriteEngine ./apache2/loncapa*<br>
</span>
<div>./apache2/loncapa_apache.conf: RewriteEngine on</div>
<div>./apache2/loncapa_apache.conf: RewriteEngine on</div>
<div>./apache2/loncapa_rewrite.conf: RewriteEngine off</div>
<div><br>
</div>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
Q2: Q1 seems like a hack approach that will be overwritten when I update. Is there an approach within loncapa configuration that automatically writes in this redirection? </div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
Thanks all.</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt;">
<br>
</div>
<div id="signature">
<div id="divtagdefaultwrapper" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif" dir="ltr">
<p style="margin-top: 0px; margin-bottom: 0px;margin-top:0; margin-bottom:0"><br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-top:0; margin-bottom:0"><br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-top:0; margin-bottom:0">- - - -</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-top:0; margin-bottom:0">Nathan Moore</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-top:0; margin-bottom:0">Professor of Physics</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-top:0; margin-bottom:0">Winona State University</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-top:0; margin-bottom:0"><br>
</p>
</div>
</div>
</body>
</html>