OPNsense Forum

English Forums => General Discussion => Topic started by: deekdeeker on December 18, 2018, 02:39:23 am

Title: ntopng & HTTPS
Post by: deekdeeker on December 18, 2018, 02:39:23 am

when enabling HTTPS for ntopng port 3001 for example this does not seem to work. Certificate generated. also tried running OPNsense with http incase that was interfering....am i just missing something obvious?

Title: Re: ntopng & HTTPS
Post by: juggie on December 20, 2018, 04:52:48 am

I have the same problem.  In my case opnsense was failing to execute /usr/local/opnsense/scripts/OPNsense/Ntopng/generate_certs.php as it did not have execute permission.  I fixed that, and the certs are generated successfully but the problem remains.

In addition geolocation also does not appear to be working in ntopng.  None of the ips are being assigned to countries, however the runtime status does say its included.  Is it not able to find the geo database?

Title: Re: ntopng & HTTPS
Post by: juggie on December 20, 2018, 05:53:43 am

I got SSL working, but geo is not working.  No countries show up in ntopng.

Title: Re: ntopng & HTTPS
Post by: jkemp on December 24, 2018, 12:09:25 am

Hey Juggie,

Can you give some insight on how you got SSL working for Ntop-NG?

I added the Authority and created the certificate but it still will not work at all. Neither with Firefox or Chromium

Title: Re: ntopng & HTTPS
Post by: mimugmail on December 24, 2018, 12:34:12 pm

generate_certs.php has wrong permission, will be fixed with next version ...

Title: Re: ntopng & HTTPS
Post by: deekdeeker on December 26, 2018, 08:13:14 pm

run: chmod +x /usr/local/opnsense/scripts/OPNsense/Ntopng/generate_certs.php

Title: Re: ntopng & HTTPS
Post by: The_Sage on January 03, 2019, 03:35:06 am

Quote from: mimugmail on December 24, 2018, 12:34:12 pm

generate_certs.php has wrong permission, will be fixed with next version ...

I also find this behavior. Can anyone explain what "Have active flows between peers with public IP addresses" in the Note. 2.3 on the Geo page. I assumed  that it would show geographically the connections to the host in question, a local PC with 23 peers, most externally.

I have all other conditions met, SSL, Google maps API etc.

Have missed a setting somewhere?
Is there a special type of Google Map API key required?

thanks
The Sage !!

Title: Re: ntopng & HTTPS
Post by: The_Sage on January 04, 2019, 01:38:36 am

Anyone got any input, hints or advice for this?

Here are 3 screenshots showing settings, my Geo map and one from Youtube.

Pic 1. Settings seems correct and working

Title: Re: ntopng & HTTPS
Post by: The_Sage on January 04, 2019, 01:39:34 am

Pic 2. My Geo Locations map showing connected peers (27)

Title: Re: ntopng & HTTPS
Post by: The_Sage on January 04, 2019, 01:40:19 am

Pic 3. Shows an image from Youtube.

Title: Re: ntopng & HTTPS
Post by: mimugmail on January 04, 2019, 07:37:57 am

Why do you post geo stuff in an https problem thread?
Just search the forums for geoip and ntopng and you'll find a recent thread that the package itself (we don't have any chance to change it) is broken and need to be fixed.

Title: Re: ntopng & HTTPS
Post by: The_Sage on January 04, 2019, 08:14:40 am

I think geoip and https is related within this post quite closely.

Quote from: juggie on December 20, 2018, 05:53:43 am

I got SSL working, but geo is not working.  No countries show up in ntopng.

This is an extension of this post.

Also I searched geoip and ntopng and got 3 results. I have read through these, and applied the chmod fix. and as per the quote still does not work. If there is another bug and/or it still doesn't work can you put a link to the post/bug/issue.

So in this instance is it better to start a new post?

EDIT.
I am sorry, I re read this post  https://forum.opnsense.org/index.php?topic=10733.msg49237#msg49237 (https://forum.opnsense.org/index.php?topic=10733.msg49237#msg49237)

And it now works.

How can we link to a post/bug/issue so the thread is terminated??

Keep up the great work.