Attachments not working with https

[Aamir Khan]

HI

 

We have implemented servicedesk 17.1 AA mode, 2 app servers 2 bg

 

We have configured both app server ip's in Load balancer and bind it to Virtual IP and vip is bind with DNS entry i.e https://ca**.pt**.ne**.*k:8080 and upload SSL cert .

 

Our users able to login with https . 

 

 

 

But while uploading documents, its failing. see the snapshot below

 

 

Below is the attachment url set for background configuration and same url ( BG url) is set for app server also...

Please advise how to resolve this attachment issue??

 

[Sean Johnston]

It looks like your Upload Servlet Path is still trying to connect over HTTP, and not HTTPS as the rest of the interface is using. You will need to ensure that the Upload Servlet Path and the rest of the interface are both using HTTPS, as SDM may block attempts at communications that go from HTTPS to HTTP for security reasons. Try adjusting the URL to https://[server]:8080/CAisd/UploadServlet and let me know if you're still seeing issues.

[Aamir Khan]

Hi Johse

 

are you saying to configure attachment url i.e

http://background:8080/CAisd/UploadServlet in loadbalancer ?

 

internally. we access sdm server using http but as we have customer

globally so we exposed the url over internet and make it https using load

balancer

 

 

On Mon, Jul 23, 2018, 9:59 PM johse01 <

[Sean Johnston]

These changes are not made to the load balancer. Open up the Administration tab > System > Server > click on each server to open the detail page. On that detail page, modify the value of the Attachment Servlet Path to ensure that it starts with "https" and not "http". Repeat this for each server to make sure that they all have a valid upload path. You might need to restart services after making this change.

[Aamir Khan]

Hi Joseh

 

it has already been tested before posting here but the issue still persist.

same issue appears 'unable to connect https://bghost.......

 

please advise

 

does it require some changes in nx file?

 

On Mon, Jul 23, 2018, 11:49 PM johse01 <

[ayofa01]

Hey Aamir,

 

Sean's recommendation was correct but you also have to change the port from 8080 to the SSL port 8443, so try changing:

https://[server]:8080/CAisd/UploadServlet

To:

https://[server]:8443/CAisd/UploadServlet

 

Let us know if this works. 

 

Thanks, 

Mike 

[Aamir Khan]

Hi Ayofa

 

I have changed the port but the issue still persist. Please advise... do we need to chhange in nx file and other files for  servlet entry also? 

 

[Pablo Oyarzo]

Hi La-Qa,

 

The issue you are getting is related to:

 

Uploading a file or URL fails with the error "Unab - CA Knowledge 

 

Based on the last screenshot provided, please test setting in the servlet path (see detailed steps in the doc above):

 

https://[server]:8080/CAisd/UploadServlet

 

Basically, we need to configure the servlet path to go to tomcat deployment running on SSL.

 

Let us know the results.

 

Regards,

Pablo

[Aamir Khan]

Hi team

 

Issue resolved by putting dns entry in attachment url path.

 

Thanks 

[boho]

Hi,

 

I have the same problem. Can you publish your solution (dns entry)? I tried a lot of variants but the problem still persist.
Thank you

[Aamir Khan]

hi

 

 

go to administration--> systems--> servers and edit 

 

put your sdm url from which u access the UI and save it

 

[boho]

A supplement from me: I had forgotten to custimize the file 'server.xml' for tomcat in folder

$NX_ROOT\bopcfg\www\CATALINA_BASE\conf