mirror of
https://github.com/NginxProxyManager/nginx-proxy-manager.git
synced 2026-04-25 09:25:55 +03:00
[GH-ISSUE #408] "website has a security policy called HTTP Strict Transport Security (HSTS), which means that Firefox can only connect to it securely." #345
Labels
No labels
awaiting feedback
bug
cannot reproduce
dns provider request
duplicate
enhancement
enhancement
enhancement
good first issue
help wanted
invalid
need more info
no certbot plugin available
product-support
pull-request
question
stale
troll
upstream issue
v2
v2
v2
v3
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/nginx-proxy-manager-NginxProxyManager#345
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @bookandrelease on GitHub (May 12, 2020).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/408
I changed nothing and then all of a sudden various proxy hosts won't connect. Using Firefox I get the error in the title. I do have SSL certs for each of them, and SSL has always been forced. I don't know what any of the other options in the SSL tab mean so I don't mess with them.
To Reproduce
Expected behavior
A clear and concise description of what you expected to happen.
Screenshots
If applicable, add screenshots to help explain your problem.
Host machine is MacBook Pro running Ubuntu.
Error log: though the issues are with ownclloud and nginx proxy hosts:
Edit: I should note that I tried disabling SSL and it still won't connect over HTTP. OwnCloud and my proxy host for the admin nginx page are encountering this error but Bitwarden and Portainer are not.
Edit 2: Microsoft Edge allows me to pass through the security warning, but I get a "403 forbidden" error when I do.
@jc21 commented on GitHub (May 20, 2020):
Very strange and hard to tell what's going on. The errors don't apply to the 2 hosts you have problems with.
It's possible that your main domain
mydomain.comhas a site that returns a HSTS header without theincludeSubDomainspart and that might affect those sub-domains.The one that works might just work because the cert is valid and the ones for the 2 that don't work are not valid. Try renewing them manually from the Certificates tab.