跳至內容
Odoo 選單
  • 登入
  • 免費試用
  • 應用程式
    財政
    • 會計
    • 發票
    • 開支報銷
    • 試算表 (BI)
    • 文件管理
    • 電子簽名
    銷售
    • 客戶關係
    • 銷售
    • POS 銷售點管理 - 零售
    • POS 銷售點管理 - 餐廳
    • 訂閱
    • 租賃
    網站
    • 網站製作
    • 電子商務
    • 網誌
    • 討論區
    • 線上客服
    • 網上學習
    供應鏈
    • 庫存
    • 製造管理
    • 產品生命周期
    • 採購
    • 保養維護
    • 品質管理
    人力資源
    • 員工管理
    • 招聘
    • 休假
    • 工作表現評核
    • 內部推薦
    • 車隊管理
    市場推廣
    • 社交媒體推廣
    • 電郵推廣
    • 短訊營銷
    • 活動
    • 自動化推廣
    • 網上調查
    服務
    • 專案管理
    • 工時管理
    • 外勤服務管理
    • 技術支援
    • 工作規劃
    • 預約管理
    生產力
    • 聊天
    • 批核
    • 物聯網
    • VoIP
    • 知識庫
    • WhatsApp
    第三方應用程式 Odoo Studio Odoo 雲端平台
  • 行業
    零售
    • 書店
    • 服裝店
    • 家具店
    • 食品雜貨店
    • 五金店
    • 玩具店
    餐飲及款待
    • 酒吧及酒館
    • 餐廳
    • 快餐
    • 賓館
    • 飲品分銷商
    • 酒店
    房地產
    • 地產代理公司
    • 建築師事務所
    • 建造業
    • 物業管理
    • 園藝
    • 業主聯會
    顧問服務
    • 會計公司
    • Odoo 合作夥伴
    • 市場推廣公司
    • 律師事務所
    • 人才招募
    • 審計及認證
    製造管理
    • 紡織
    • 金屬
    • 家具
    • 食品
    • 啤酒廠
    • 企業禮品
    保健與健身
    • 運動俱樂部
    • 眼鏡店
    • 健身中心
    • 健康從業人員
    • 藥房
    • 髮型屋
    技術行業
    • 雜工
    • IT 硬體與支援
    • 太陽能系統
    • 鞋匠
    • 清潔服務
    • 暖通空調服務
    其他
    • 非牟利組織
    • 環境保護機構
    • 廣告板租賃
    • 攝影服務
    • 自行車租賃
    • 軟體經銷商
    瀏覽所有行業
  • 社群
    學習
    • 教學影片
    • 使用說明
    • 認證
    • 培訓
    • 網誌
    • Podcast
    增強教學效能
    • 教育計劃
    • Scale Up! 商業遊戲
    • 到訪 Odoo
    取得軟件
    • 下載
    • 版本對照表
    • 版本說明
    合作
    • GitHub
    • 討論區
    • 活動
    • 翻譯
    • 成為合作夥伴
    • 合作夥伴服務
    • 登記你的會計服務公司
    獲取服務相關資料
    • 尋找合作夥伴
    • 尋找會計服務
    • 預約顧問諮詢
    • 安裝及推行服務
    • 客戶案例
    • 支援
    • 軟件升級
    GitHub YouTube Twitter LinkedIn Instagram Facebook Spotify
    +1 (650) 691-3277
    預約示範
  • 定價
  • 技術支援

Odoo is the world's easiest all-in-one management software.
It includes hundreds of business apps:

  • 客戶關係
  • e-Commerce
  • 會計
  • 庫存
  • PoS
  • 專案管理
  • MRP
All apps
只限註冊用戶才可與社群互動。
所有帖文 人 獎章
標籤 (查看所有)
odoo accounting v14 pos v15
關於此討論區
只限註冊用戶才可與社群互動。
所有帖文 人 獎章
標籤 (查看所有)
odoo accounting v14 pos v15
關於此討論區
支援

Openerp ProxyPass for https access what to change in config?

訂閱

此帖文有活動時,接收通知

此問題已被標幟
3 回覆
227779 瀏覽次數
頭像
Prakash

In OpenERP 7 ubuntu SSL Connection:-

  <VirtualHost *:443>
     ServerAdmin webmaster@localhost
     ServerName erp.openerp.com
     SSLEngine on
     SSLCertificateFile /etc/apache2/ssl/server.crt
     SSLCertificateKeyFile /etc/apache2/ssl/server.key
     ProxyRequests Off
     <Proxy *>
     Order deny,allow
     Allow from all
     </Proxy>
      ProxyVia On
      ProxyPass / http://192.168.20.60:80/
    <location / >
      ProxyPassReverse /
     </location>
     ProxyPassReverse /  http://192.168.20.60:80/
     RequestHeader set "X-Forwarded-Proto" "https"
     # Fix IE problem (httpapache proxy dav error 408/409)
     SetEnv proxy-nokeepalive 1
  </VirtualHost>

In the web browser typed https://ServerName It show message It Works! but no content has been added, yet.

ProxyPass changed into:- [80 to 8069]

   ProxyPass / http://192.168.20.60:8069/

After changed the above line In the web browser typed https://ServerName its automatic open the browser http://servername

SSL mode Enabled in Linux but it autoredirect http instead of https how to solve this issue?

1
頭像
捨棄
FRACHT FWO CZECH

Why are you using a ProxyPassReverse / on location / ? What do you expect this should do?

頭像
FRACHT FWO CZECH
最佳答案

You should always read the original documentation and try to understand and adapt it to your special situation:

httpd  apache  org / docs / 2.2 / mod / mod_proxy.html (can not post links)

Why do you have OpenERP listening on 192.168.20.60? Is this a dedicated backend-server that runs openerp-server exclusively and Apache is running on another server that can access this IP? I see no other usecase for this configuration - if you have OpenERP on the same machine as Apache, you most likely would like to have OpenERP listen on 127.0.0.1 only and use Apache for accessing it from the outer world - this is neccessary if you want to encrypt the connection via SSL, what you usually do.

The SSL part in your config looks ok, for the proxy part you can try to do this:

ProxyRequests Off
ProxyPreserveHost On
ProxyPass / http://127.0.0.1:8069/
ProxyPassReverse / http://127.0.0.1:8069/

I am not 100% sure about the ProxyPassReverse as I do not know if OpenERP emits redirects itself - also there is a proxy_mode setting in openerp-server.conf which should handle rewriting of headers already, but using the ProxyPassReverse directive like above seems to work ok for me.

To make openerp-server listen on 127.0.0.1 (only) in /etc/openerp/openerp-server.conf write:

xmlrpc_interface = 127.0.0.1

To redirect all requests to an unencrypted port on the same domain name (that is port 80) use another VirtualHost that just redirects to https like this:

<VirtualHost *:80>
ServerName openerp.example.com
Redirect 301 / https://openerp.example.com
</VirtualHost>

I hope these bits can help you to figure it out for your own setup.

1
頭像
捨棄
頭像
patrick
最佳答案

It looks like you use apache, I have installed NGINX as frontend to get an SSL connection to openERP. I have used the following page to set it up.

The config for NGINX:

upstream webserver {
  server 127.0.0.1:8069 weight=1 fail_timeout=300s;
}

server {
  listen 80;
  server_name    _;

  # Strict Transport Security
  add_header Strict-Transport-Security max-age=2592000;

  rewrite ^/.*$ https://$host$request_uri? permanent;
}

server {
  # server port and name
  listen        443 default;
  server_name   openerpserver.example.com;

  # Specifies the maximum accepted body size of a client request,
  # as indicated by the request header Content-Length.
  client_max_body_size 200m;

  # ssl log files
  access_log    /var/log/nginx/openerp-access.log;
  error_log    /var/log/nginx/openerp-error.log;

  # ssl certificate files
  ssl on;
  ssl_certificate        /etc/ssl/nginx/server.crt;
  ssl_certificate_key    /etc/ssl/nginx/server.key;

  # add ssl specific settings
  keepalive_timeout    60;

  # limit ciphers
  ssl_ciphers            HIGH:!ADH:!MD5;
  ssl_protocols            SSLv3 TLSv1;
  ssl_prefer_server_ciphers    on;

  # increase proxy buffer to handle some OpenERP web requests
  proxy_buffers 16 64k;
  proxy_buffer_size 128k;

  location / {
    proxy_pass    http://webserver;
    # force timeouts if the backend dies
    proxy_next_upstream error timeout invalid_header http_500 http_502 http_503;

    # set headers
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forward-For $proxy_add_x_forwarded_for;

    # Let the OpenERP web service know that we're using HTTPS, otherwise
    # it will generate URL using http:// and not https://
    proxy_set_header X-Forwarded-Proto https;

    # by default, do not forward anything
    proxy_redirect off;
  }

  # cache some static data in memory for 60mins.
  # under heavy load this should relieve stress on the OpenERP web interface a bit.
  location ~* /web/static/ {
    proxy_cache_valid 200 60m;
    proxy_buffering    on;
    expires 864000;
    proxy_pass http://webserver;
  }
}

In the file /etc/openerp/openerp-server.conf, I added:

#XML only local, if you have an external app connecting to this
#server, remove the next line
xmlrpc_interface = 127.0.0.1
netrpc_interface = 127.0.0.1

Hopefully you can compare these settings with yours.

0
頭像
捨棄
Prakash
作者

Thanks for reply Also Tried NGINX but facing the same problem in the address bar entered https://servername it automatically open the page http://servername

patrick

Did you change the name of the server in the NGINX config file (openerpserver.example.com -> your.server.name.or.IP) ?? Just follow the guide on the page I linked to. The only issue I had was that the file .rnd in the home directory was locked by root. Just delete it with su rm .rnd

Prakash
作者

Thanks for reply Server Name changed based on system In ubuntu server through SSH how to find openerp port no [currently configured default port no 8069] In default openerp-server.conf file port no not mentioned.

patrick

If you did not specify any port, openERP should listen on 8069. Are you sure only NGinx is listening on port 80, so Apache is not running cq not installed?

頭像
Dharmesh Rathod
最佳答案

Hi,

Please visit this : http://acespritechblog.wordpress.com/2013/05/29/openerp-7-with-ssl-on-ubuntu-12-04/

Email : info@acespritech.com
Skype : acespritech
Blog : acespritechblog.wordpress.com

-1
頭像
捨棄
Prakash
作者

Hi thanks for reply uninstalled the apache setup and installed again and followed the steps its shows Service Temporarily Unavailable Server at erp.servername Port 443. In ubuntu server through SSH how to find openerp port no [currently configured default port no 8069]

patrick

The info at your link is a little short. After changing config of Apache, you need to restart it, you did not mention it. Also you did not configure openERP to accept only from local host. so it is still possible to access openERP over http.....

FRACHT FWO CZECH

The configuration you are linking to triggers a syntax error and will make your apache not start - it should be removed.

</Proxy *> is syntactically wrong, also ProxyVia is most likely not needed, if your next hop is openerp-server itself, and please explain what do you expect ProxyPassReverse / to do in <location />?

Please test your configuration at least three times before posting it somewhere.

喜歡這則討論?不要只閱讀,加入發表意見吧!

今天就建立帳戶,享受獨家功能,與我們精彩的社群互動!

註冊
社群
  • 教學影片
  • 使用說明
  • 討論區
開源
  • 下載
  • GitHub
  • Runbot 測試環境
  • 翻譯
服務
  • odoo.sh 網頁寄存
  • 支援
  • 升級
  • 自訂功能開發
  • 教育及培訓
  • 尋找會計服務
  • 尋找合作夥伴
  • 成為合作夥伴
關於我們
  • 關於 Odoo 公司
  • 品牌資產
  • 聯絡我們
  • 招聘
  • 活動
  • Podcast
  • 網誌
  • 客戶
  • 法律 • 私隱政策
  • 安全性
الْعَرَبيّة Català 简体中文 繁體中文 (台灣) Čeština Dansk Nederlands English Suomi Français Deutsch हिंदी Bahasa Indonesia Italiano 日本語 한국어 (KR) Lietuvių kalba Język polski Português (BR) română русский язык Slovenský jazyk slovenščina Español (América Latina) Español ภาษาไทย Türkçe українська Tiếng Việt

Odoo 是一套開放源碼的商業管理系統,涵蓋你公司全部的營運需要,包括客戶關係管理(CRM)、電子商務、會計、庫存管理、POS(銷售點管理)、專案管理等應用程式。

Odoo 的獨特價值是非常簡單易用,同時將不同應用程式完美整合。

Website made with

Odoo Experience on YouTube

1. Use the live chat to ask your questions.
2. The operator answers within a few minutes.

Live support on Youtube
Watch now