{"id":3674,"date":"2023-10-30T21:22:29","date_gmt":"2023-10-30T21:22:29","guid":{"rendered":"https:\/\/orfeolibre.org\/inicio\/?post_type=knowledgebase&#038;p=3674"},"modified":"2023-10-30T21:29:00","modified_gmt":"2023-10-30T21:29:00","slug":"agregar-https","status":"publish","type":"knowledgebase","link":"https:\/\/orfeolibre.org\/inicio\/documentacion-orfeo\/documentacion-orfeong\/otros-orfeong-1-0-debian-12-ubuntu-22\/agregar-https\/","title":{"rendered":"Agregar HTTPS"},"content":{"rendered":"<h2>Descripci\u00f3n<\/h2>\n<p>Estos son los pasos para poder ejecutar OrfeoNG 1.x por canal cifrado SSL \/ TLS<\/p>\n<h2>Prerequistos<\/h2>\n<p>Tener un Orfeo NG funcionan con toda.<\/p>\n<h2>Instalaci\u00f3n<\/h2>\n<p>Habilitar HTTPS (o HTTP entunelado por TLS) requiere tener certificados para cifrar. Esto pueden ser autofirmados como los que ya trae Apache cuando uno habilita el modulo SSL, los generados de manera gratuita por Lets Encript o los que se puede comprar en muchos proveedores disponibles.<\/p>\n<p>Una vez tenga la decisi\u00f3n de que certificado usar podemos montar una herramienta que nos va a ayudar a entunelar los sockets.<\/p>\n<pre>$ apt-get install stunnel<\/pre>\n<p>OJO..pruebe que apache ya anda por https &#8230; en un navegador escriba https:\/\/miservidor ..y debe poder desplegar la pagina de entrada.. con algunos errores, pero garantiza que apache funciona.<\/p>\n<h2>Configuraci\u00f3n<\/h2>\n<h3>1. NG_Backend<\/h3>\n<p>En el archivo ng_backend\/api\/config\/params-local.php\u00a0 cambie todo por https. Por ejemplo<\/p>\n<pre>'ipServer' =&gt; 'https:\/\/orfeong-demo.skinatech.com\/orfeo-ng\/#\/',\r\n'urlBaseApiPublic' =&gt; 'https:\/\/orfeong-demo.skinatech.com\/ng_backend\/frontend\/web\/',<\/pre>\n<h3>2. NG_Sockets<\/h3>\n<p>Aqu\u00ed usamos el stunnel que ya instalamos. Primero incluimos el archivo de configuraci\u00f3n \/etc\/stunnel\/stunnel.conf (Mirar Anexo). Este archivo en el Anexo muestra que estoy poniendo a escuchar en el puerto 3006 entunelado con certificados generados por letsencript<\/p>\n<p>Active el servicio y arranquelo<\/p>\n<pre>$ systemctl enable stunnel\r\n$ systemctl restart stunnel<\/pre>\n<p>Puede probar si este nuevo puerto esta abierto con<\/p>\n<pre>$ nmap localhost<\/pre>\n<pre>25\/tcp open smtp\r\n80\/tcp open http\r\n443\/tcp open https\r\n2222\/tcp open EtherNetIP-1\r\n3005\/tcp open deslogin\r\n3006\/tcp open deslogind\r\n3306\/tcp open mysql\r\n9102\/tcp open jetdirect<\/pre>\n<h3>3. NG_Frontend<\/h3>\n<p>Aqu\u00ed tambi\u00e9n toca cambiar las direcciones a https en el archivo ng_frontend\/src\/environments\/environment.ts.\u00a0 OJO .. el puerto tambi\u00e9n cambia a 3006<\/p>\n<pre>apiUrl: 'https:\/\/orfeong-demo.skinatech.com\/ng_backend\/api\/web\/',\r\napiUrlBasePath: 'https:\/\/orfeong-demo.skinatech.com\/ng_backend',\r\n\r\nfrontUrl: 'https:\/\/orfeong-demo.skinatech.com\/orfeo-ng\/',\r\n\r\nSOCKET_ENDPOINT: 'https:\/\/orfeong-demo.skinatech.com:3006',<\/pre>\n<h4>4. Vuelva a activar el front<\/h4>\n<p>Siguiendo el wiki<\/p>\n<p>https:\/\/orfeolibre.org\/inicio\/documentacion-orfeo\/documentacion-orfeong\/guias-instalacion-orfeong\/activacion-de-la-copia\/<\/p>\n<h2>Trucos<\/h2>\n<p>&nbsp;<\/p>\n<h2>Problemas<\/h2>\n<h3>1. El firewall<\/h3>\n<p>Es posible que hay algun firewall que no este dejando llegar el trafico a la 3006 y eso hace que no despliegue las letras o que no pueda ingresar.<\/p>\n<p>&#8211;<\/p>\n<h2>Referencias<\/h2>\n<p>&#8211;<\/p>\n<h2>Anexo<\/h2>\n<p>Archivo de configuracion estandar de Stunnel\u00a0 \/etc\/stunnel\/<\/p>\n<p>&#8230;&#8230;&#8230;&#8230;&#8230;.<\/p>\n<p>; Entunelar NG_Sockets<\/p>\n<p>[ng_sockets]<br \/>\naccept = 3006<br \/>\nconnect = 3005<br \/>\ncert = \/etc\/letsencrypt\/live\/orfeong-demo.skinatech.com\/fullchain.pem<br \/>\nkey = \/etc\/letsencrypt\/live\/orfeong-demo.skinatech.com\/privkey.pem<\/p>\n<p>; vim:ft=dosini<\/p>\n<p>&#8230;&#8230;&#8230;&#8230;&#8230;.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Descripci\u00f3n Estos son los pasos para poder ejecutar OrfeoNG 1.x por canal cifrado SSL \/ TLS Prerequistos Tener un Orfeo NG funcionan con toda. Instalaci\u00f3n Habilitar HTTPS (o HTTP entunelado por TLS) requiere tener certificados [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","template":"","knowledgebase_cat":[53],"class_list":["post-3674","knowledgebase","type-knowledgebase","status-publish","hentry","knowledgebase_cat-otros-orfeong-1-0-debian-12-ubuntu-22"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Agregar HTTPS - Orfeo SGDEA - Gesti\u00f3n Documental<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/orfeolibre.org\/inicio\/documentacion-orfeo\/documentacion-orfeong\/otros-orfeong-1-0-debian-12-ubuntu-22\/agregar-https\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Agregar HTTPS - Orfeo SGDEA - Gesti\u00f3n Documental\" \/>\n<meta property=\"og:description\" content=\"Descripci\u00f3n Estos son los pasos para poder ejecutar OrfeoNG 1.x por canal cifrado SSL \/ TLS Prerequistos Tener un Orfeo NG funcionan con toda. Instalaci\u00f3n Habilitar HTTPS (o HTTP entunelado por TLS) requiere tener certificados [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/orfeolibre.org\/inicio\/documentacion-orfeo\/documentacion-orfeong\/otros-orfeong-1-0-debian-12-ubuntu-22\/agregar-https\/\" \/>\n<meta property=\"og:site_name\" content=\"Orfeo SGDEA - Gesti\u00f3n Documental\" \/>\n<meta property=\"article:modified_time\" content=\"2023-10-30T21:29:00+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/orfeolibre.org\\\/inicio\\\/documentacion-orfeo\\\/documentacion-orfeong\\\/otros-orfeong-1-0-debian-12-ubuntu-22\\\/agregar-https\\\/\",\"url\":\"https:\\\/\\\/orfeolibre.org\\\/inicio\\\/documentacion-orfeo\\\/documentacion-orfeong\\\/otros-orfeong-1-0-debian-12-ubuntu-22\\\/agregar-https\\\/\",\"name\":\"Agregar HTTPS - Orfeo SGDEA - Gesti\u00f3n Documental\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/orfeolibre.org\\\/inicio\\\/#website\"},\"datePublished\":\"2023-10-30T21:22:29+00:00\",\"dateModified\":\"2023-10-30T21:29:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/orfeolibre.org\\\/inicio\\\/documentacion-orfeo\\\/documentacion-orfeong\\\/otros-orfeong-1-0-debian-12-ubuntu-22\\\/agregar-https\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/orfeolibre.org\\\/inicio\\\/documentacion-orfeo\\\/documentacion-orfeong\\\/otros-orfeong-1-0-debian-12-ubuntu-22\\\/agregar-https\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/orfeolibre.org\\\/inicio\\\/documentacion-orfeo\\\/documentacion-orfeong\\\/otros-orfeong-1-0-debian-12-ubuntu-22\\\/agregar-https\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/orfeolibre.org\\\/inicio\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Agregar HTTPS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/orfeolibre.org\\\/inicio\\\/#website\",\"url\":\"https:\\\/\\\/orfeolibre.org\\\/inicio\\\/\",\"name\":\"Orfeo SGDEA - Gesti\u00f3n Documental\",\"description\":\"Sistema de Gesti\u00f3n Documental de Archivo Electr\u00f3nico\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/orfeolibre.org\\\/inicio\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Agregar HTTPS - Orfeo SGDEA - Gesti\u00f3n Documental","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/orfeolibre.org\/inicio\/documentacion-orfeo\/documentacion-orfeong\/otros-orfeong-1-0-debian-12-ubuntu-22\/agregar-https\/","og_locale":"es_ES","og_type":"article","og_title":"Agregar HTTPS - Orfeo SGDEA - Gesti\u00f3n Documental","og_description":"Descripci\u00f3n Estos son los pasos para poder ejecutar OrfeoNG 1.x por canal cifrado SSL \/ TLS Prerequistos Tener un Orfeo NG funcionan con toda. Instalaci\u00f3n Habilitar HTTPS (o HTTP entunelado por TLS) requiere tener certificados [&hellip;]","og_url":"https:\/\/orfeolibre.org\/inicio\/documentacion-orfeo\/documentacion-orfeong\/otros-orfeong-1-0-debian-12-ubuntu-22\/agregar-https\/","og_site_name":"Orfeo SGDEA - Gesti\u00f3n Documental","article_modified_time":"2023-10-30T21:29:00+00:00","twitter_card":"summary_large_image","twitter_misc":{"Tiempo de lectura":"2 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/orfeolibre.org\/inicio\/documentacion-orfeo\/documentacion-orfeong\/otros-orfeong-1-0-debian-12-ubuntu-22\/agregar-https\/","url":"https:\/\/orfeolibre.org\/inicio\/documentacion-orfeo\/documentacion-orfeong\/otros-orfeong-1-0-debian-12-ubuntu-22\/agregar-https\/","name":"Agregar HTTPS - Orfeo SGDEA - Gesti\u00f3n Documental","isPartOf":{"@id":"https:\/\/orfeolibre.org\/inicio\/#website"},"datePublished":"2023-10-30T21:22:29+00:00","dateModified":"2023-10-30T21:29:00+00:00","breadcrumb":{"@id":"https:\/\/orfeolibre.org\/inicio\/documentacion-orfeo\/documentacion-orfeong\/otros-orfeong-1-0-debian-12-ubuntu-22\/agregar-https\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/orfeolibre.org\/inicio\/documentacion-orfeo\/documentacion-orfeong\/otros-orfeong-1-0-debian-12-ubuntu-22\/agregar-https\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/orfeolibre.org\/inicio\/documentacion-orfeo\/documentacion-orfeong\/otros-orfeong-1-0-debian-12-ubuntu-22\/agregar-https\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/orfeolibre.org\/inicio\/"},{"@type":"ListItem","position":2,"name":"Agregar HTTPS"}]},{"@type":"WebSite","@id":"https:\/\/orfeolibre.org\/inicio\/#website","url":"https:\/\/orfeolibre.org\/inicio\/","name":"Orfeo SGDEA - Gesti\u00f3n Documental","description":"Sistema de Gesti\u00f3n Documental de Archivo Electr\u00f3nico","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/orfeolibre.org\/inicio\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"}]}},"_links":{"self":[{"href":"https:\/\/orfeolibre.org\/inicio\/wp-json\/wp\/v2\/knowledgebase\/3674","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/orfeolibre.org\/inicio\/wp-json\/wp\/v2\/knowledgebase"}],"about":[{"href":"https:\/\/orfeolibre.org\/inicio\/wp-json\/wp\/v2\/types\/knowledgebase"}],"author":[{"embeddable":true,"href":"https:\/\/orfeolibre.org\/inicio\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/orfeolibre.org\/inicio\/wp-json\/wp\/v2\/comments?post=3674"}],"version-history":[{"count":4,"href":"https:\/\/orfeolibre.org\/inicio\/wp-json\/wp\/v2\/knowledgebase\/3674\/revisions"}],"predecessor-version":[{"id":3678,"href":"https:\/\/orfeolibre.org\/inicio\/wp-json\/wp\/v2\/knowledgebase\/3674\/revisions\/3678"}],"wp:attachment":[{"href":"https:\/\/orfeolibre.org\/inicio\/wp-json\/wp\/v2\/media?parent=3674"}],"wp:term":[{"taxonomy":"knowledgebase_cat","embeddable":true,"href":"https:\/\/orfeolibre.org\/inicio\/wp-json\/wp\/v2\/knowledgebase_cat?post=3674"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}