My odoo website appears as an insecure site on searches, and I think the SSL its not instaled.
How can I install the SSL certificate or how can I buy one to install?
Odoo is the world's easiest all-in-one management software.
It includes hundreds of business apps:
My odoo website appears as an insecure site on searches, and I think the SSL its not instaled.
How can I install the SSL certificate or how can I buy one to install?
To install an SSL certificate in Odoo, you will need to follow these steps:
Obtain an SSL certificate: You can either purchase an SSL certificate from a trusted certificate authority (CA) or generate a self-signed certificate.
Install the certificate: Once you have obtained the SSL certificate, you will need to install it on the server where Odoo is hosted. This typically involves placing the certificate and key files in a specific directory and updating the configuration of your web server to use the certificate.
Update Odoo's configuration: After installing the SSL certificate on the server, you will need to update the Odoo configuration to use the certificate. In the Odoo configuration file (usually located at /etc/odoo/odoo.conf), you will need to set the following parameters:
ssl_certificate: The path to the SSL certificate file
ssl_certificate_key: The path to the SSL certificate key file
Restart Odoo: After updating the configuration, you will need to restart the Odoo server for the changes to take effect.
Test the SSL connection: Once the SSL certificate is installed and configured, you should be able to access the Odoo server using https://. You can test the SSL connection by visiting the server in a web browser and checking that the connection is secure (e.g., by looking for a padlock icon in the address bar).
I hope this helps! Let me know if you have any questions or need further assistance
Hello, i use ODOO 17 on Windows server, and i turn around the pot for configure SSL for the web site. I had create my SSL certificat and i can't install it!
Have you a solution or a tuto specific for Windows please?
Hello Muhammad,
do I need to make any further configurations in the odoo.conf.
Somthing like bind_port / ip ... equivalent to xmlrpc_port?
https_port = 443
https_interface = 1.2.3.4
Thank you
A small addendum to better subscribe my problem:
odoo runs behind an apache reverse proxy -> https://odoo.mycompany,com works fine, also the Azure AD Single Sign On works fine.
My problem is accessing odoo via the standard odoo app for android. While connecting via app, i receive an 400-server-connection error (see log). So i have to
1.) disable csrf handling or
2.) remove the " unsafe HTTP method" in the build-in odoo webserver.
Adding the ssl_certificate(_key) options in the odoo.conf is a try for option 2.
Kind Regards
Steffen
########
WARNING odoo-enterprise odoo.http: No CSRF validation token provided for path '/'
Odoo URLs are CSRF-protected by default (when accessed with unsafe
HTTP methods). See
https://www.odoo.com/documentation/16.0/developer/reference/addons/http.html#csrf
for more details.
* if this endpoint is accessed through Odoo via py-QWeb form, embed a CSRF
token in the form, Tokens are available via `request.csrf_token()`
can be provided through a hidden input and must be POST-ed named
`csrf_token` e.g. in your form add:
<input type="hidden" name="csrf_token" t-att-value="request.csrf_token()"/>
* if the form is generated or posted in javascript, the token value is
available as `csrf_token` on `web.core` and as the `csrf_token`
value in the default js-qweb execution context
* if the form is accessed by an external third party (e.g. REST API
endpoint, payment gateway callback) you will need to disable CSRF
protection (and implement your own protection if necessary) by
passing the `csrf=False` parameter to the `route` decorator.
addendum 2
my "problem" is solved ... and the solution is so cheap :-).
There is no trouble with the webserver / reverse-proxy configuration ...
In the odoo servername field in the app we have not to put in the servername
i.e. odoo.company.org
in the servername field we have to put the URL
i.e. https://odoo.company.org).
Thats all
Thanks for your input. Addendum2 is clear and is what is told by odoo unfortunately not working form me, do not know why. I tried with both: https://mydomain.fr and https://www.mydomain.fr but still not ok.
If you want to use SSL it is recommended to have a reverse proxy in front of Odoo. The reverse proxy receives the traffic from the clients and forwards it to the Odoo server. You can use several reverse proxies for this (e.g., Nginx, Traefik), but Nginx is probably most used as a reverse proxy for Odoo. You can use Let's Encrypt (a non-profit certificate authority) to obtain a SSL certificate.
There are plenty of tutorials how to set this up, and also plenty of related topics on the Odoo Forum about this. You can also check out my blog post, on how to set up Nginx with the Nginx Proxy Manager. It uses Docker, but you don't have to use this of course: Setting up a reverse proxy for Odoo with Nginx Proxy Manager in Docker
I hope this helps!
Hi,
To configure SSL for your odoo instance, you can refer this video explaining how to generate SSL certificate with letsencrypt and configure in odoo: Enable Https For Odoo Instance
Thanks
Create an account today to enjoy exclusive features and engage with our awesome community!
Sign upRelated Posts | Replies | Views | Activity | |
---|---|---|---|---|
|
2
Jun 23
|
2650 | ||
|
1
Jul 22
|
3024 | ||
|
0
May 21
|
1852 | ||
|
3
Sep 20
|
4836 | ||
|
2
Jan 24
|
1956 |