https URL Support

https URL Support SearchSearch
Author Message
Tasneem Abumhlula
New member
Username: Tasneemmh

Post Number: 1
Registered: 08-2022
Posted on Monday, August 08, 2022 - 08:51 am:   

Dear Support,

Dose NowSMS support a https connection from another server?
like using https:// in URL instead http://***.***.***.***:8800/?user=------&password=-------.

Thanks.}}
Des - NowSMS Support
Board Administrator
Username: Desosms

Post Number: 6338
Registered: 08-2008
Posted on Monday, August 08, 2022 - 06:31 pm:   

Yes, but ...

Setting up a server for HTTPS is more difficult, because an SSL/TLS certificate needs to be installed on the server. This is the case with any server that provides an HTTPS interface, including NowSMS.

Go to the SSL/TLS page in NowSMS Windows, or the SSL/TLS Certificate section in NowSMS Linux, to begin this process.

The normal procedure is that you use the option in NowSMS to create a Certificate Signing Request (CSR). The CSR is a text file (SSL.CSR, usually in Program Files (X86)/NowSMS in Windows or /var/lib/nowsms in Linux), and you need to submit the data in this file to a Certificate Authority (CA). The CA will issue an SSL/TLS certificate, which you need to save in a text file named SSL.CA in the same directory as SSL.CSR. The NowSMS service needs to be restarted after SSL.CA is applied.

When you create the CSR, NowSMS will enable additional configuration settings where you specify the TCP port number to be used for HTTPS (SSL/TLS).

Once you have HTTPS working, if you wish to disable plain-text HTTP, next to the port number settings there is an "SSL Redirect Only" option. When this option is set, any attempts to connect to the plain text HTTP port will receive a "redirect" response indicating that HTTPS must be used.

Regards,

Des
NowSMS Support
Tasneem Mh
New member
Username: Tasneemmh

Post Number: 2
Registered: 08-2022
Posted on Tuesday, August 16, 2022 - 09:10 pm:   

Dear support ,

Firstly, thanks for your response, i followed the previous steps starting from creat CRS and submitted with CA .
But i still get the issue hen i access the web url it shows not secure connection, it appears to be the CRS i creat from nowsms is having a missing value (Subject Authority Name) how i over come this issue in-order to have a fully secure connection.
Thanks in advance
Des - NowSMS Support
Board Administrator
Username: Desosms

Post Number: 6340
Registered: 08-2008
Posted on Wednesday, August 17, 2022 - 09:15 pm:   

Hi,

I'm sorry, but I don't know what a "Subject Authority Name" is.

In an SSL certificate, there is a concept of a "Subject Alternative Name", which is related to additional host names in a single certificate. The CSR generated by NowSMS is for a single host name which is encoded as "Common Name".

Your message suggests that you are seeing this error in your web browser. Perhaps you are connecting to the server by IP address, but SSL certificates are assigned to a host name, so you need to use the host name in the URL.

Regards,

Des
NowSMS Support
Tasneem Mh
New member
Username: Tasneemmh

Post Number: 3
Registered: 08-2022
Posted on Tuesday, August 23, 2022 - 06:28 pm:   

Hi Des,

I am already using the hostname in the URL and still get the following error.
Des - NowSMS Support
Board Administrator
Username: Desosms

Post Number: 6341
Registered: 08-2008
Posted on Tuesday, August 23, 2022 - 07:21 pm:   

Hi,

I am not an expert on HTTPS certificates, but when I google ERR_CERT_COMMON_NAME_INVALID, it tells me that the host/server name in the URL does not match the host name (also known as "common name") in the certificate.

When you generated the CSR in NowSMS, the "Host Name" needs to be the same as the host/server name in your URL.

Regards,

Des
NowSMS Support
Tasneem Mh
New member
Username: Tasneemmh

Post Number: 3
Registered: 08-2022
Posted on Saturday, October 01, 2022 - 12:20 am:   

Hi Des ,

the certificate I generate from Nowsms app just worked fine only with internet explorer but not with Edge and chrome , and the main reason is that internet explorer (IE) does not require to have a Common Name in the SAN unlike the All modern browsers .



any recommended solution to make it work with modern browser.

Thanks in advance.

Tas
Nelson Filipe Joaquim
New member
Username: Dbi

Post Number: 6
Registered: 07-2022
Posted on Wednesday, December 18, 2024 - 08:45 am:   

Hi Des.
We are ensuring secure access (https) to the nowsms server, but we have encountered some challenges and need your support.

We are making the web certificate request directly from the server to our CA, not via a CSR. What is not very clear to us is when you say "The CA will issue an SSL/TLS certificate, which you need to save in a text file named SSL.CA in the same directory as SSL.CSR"

Do we have to save the certificate in a file that we will call SSL.CA in txt format within the NowSMS directory? If so, how do we do that? Well, we can't.

Our NowSMS Serial Number 5090 and 5088

Waiting for your prompt feedback.


Thanks.
Bryce Norwood - NowSMS Support
Board Administrator
Username: Bryce

Post Number: 8549
Registered: 10-2002
Posted on Wednesday, December 18, 2024 - 03:22 pm:   

Hi Nelson,

Windows NOTEPAD is what I would typically use to create/edit the certificate files. If you receive an access denied error trying to create/edit a file in the NowSMS directory, then right click on a shortcut for NOTEPAD and select "run as Administrator".

If your CA is generating a certificate without using the CSR, then the CA needs to supply a private key (stored in the SSL.KEY file in text format) and the certificate (stored in the SSL.CA file in text format).

NowSMS expects SSL certificates in PEM format in Base64 ASCII encoded text files. PEM files use ASCII encoding, so you can open them in any text editor such as notepad. Each certificate in the PEM file is contained between the ---- BEGIN CERTIFICATE---- and ----END CERTIFICATE---- statements. The private key is contained between the ---- BEGIN RSA PRIVATE KEY----- and -----END RSA PRIVATE KEY----- statements.

After making any changes to these certificate files, it is necessary to restart the NowSMS SMS gateway service.

Regards,

Bryce Norwood
NowSMS Support
Nelson Filipe Joaquim
New member
Username: Dbi

Post Number: 7
Registered: 07-2022
Posted on Thursday, December 19, 2024 - 07:34 am:   

Hi Bryce
Thanks for your prompt response.

In our case, the private key is not being provided separately, it is already generated together with the certificate. Do we necessarily need to generate it separately to create or edit the SSL.KEY file?

Best regards.
Bryce Norwood - NowSMS Support
Board Administrator
Username: Bryce

Post Number: 8550
Registered: 10-2002
Posted on Thursday, December 19, 2024 - 12:39 pm:   

Place the key, including the BEGIN//END text in SSL.KEY. Any certificates place in SSL.CA.

Regards,

Bryce

Add Your Message Here, or click here to start a new topic.
Post:
Bold text Italics Underline Create a hyperlink Insert a clipart image
Options: Automatically activate URLs in message
Action: