SSL Letsencrypt Phpmyadmin: There is a mismatch between HTTPS indicated on the server and client.

Please fill in any relevant information that applies to you:

• CentOS Version: CentOS 7 64bit
  
• Centmin Mod Version Installed: 123.09beta01
• Nginx Version Installed: 1.17.7
• PHP Version Installed: 7.3.13
• MariaDB MySQL Version Installed:10.3.21
• When was last time updated Centmin Mod code base ? : just now

Hello

Today i tried to access the phpMyAdmin and i got this:


Welcome to phpMyAdmin

There is a mismatch between HTTPS indicated on the server and client. This can lead to a non working phpMyAdmin or a security risk. Please fix your server configuration to indicate HTTPS properly.

---

I did a check on a server that i use the orange cloud for my hostname at Cloudflare and on one that i don't and i got the same problem. So the error is the same even if i use the Cloudflare certificate or Let's encrypt certificate....

I was used long time ago your @eva2000 instructions about how to add https support for the hostname and it was great until today...

I check also if the certificate was expired or not renewed or something but it's ok.

Using the Cloudflare one or Let's encrypt doesn't help...


and:


virtual.ssl.conf:

Code:

server {
  listen 443 ssl http2;
  server_name server.mydomain.com;

  ssl_certificate      /usr/local/nginx/conf/ssl/server.mydomain.com/server.mydomain.com-acme.cer;
  ssl_certificate_key  /usr/local/nginx/conf/ssl/server.mydomain.com/server.mydomain.com-acme.key;
  ssl_certificate_key  /usr/local/nginx/conf/ssl/server.mydomain.com/server.mydomain.com.key;
  include /usr/local/nginx/conf/ssl_include.conf;

  keepalive_timeout 3000;
  client_body_buffer_size 256k;
  client_body_timeout 3000s;
  client_header_buffer_size 256k;
  ## how long a connection has to complete sending
  ## it's headers for request to be processed
  client_header_timeout 60s;
  client_max_body_size 512m;
  connection_pool_size 512;
  directio 512m;
  ignore_invalid_headers on;
  large_client_header_buffers 8 256k;

  http2_max_field_size 16k;
  http2_max_header_size 32k;
  # dual cert supported ssl ciphers
  ssl_ciphers     EECDH+CHACHA20-draft:EECDH+CHACHA20:EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA256:EECDH+ECDSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+SHA384:EECDH+AES128:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA:!CAMELLIA;
  ssl_prefer_server_ciphers   on;
  #add_header Alternate-Protocol  443:npn-spdy/3;
  #add_header Strict-Transport-Security "max-age=31536000; includeSubdomains;";
  #add_header X-Frame-Options SAMEORIGIN;
  #add_header X-Xss-Protection "1; mode=block" always;
  #add_header X-Content-Type-Options "nosniff" always;
  #spdy_headers_comp 5;
  ssl_buffer_size 1369;
  ssl_session_tickets on;

  # enable ocsp stapling
  resolver 8.8.8.8 8.8.4.4 valid=10m;
  resolver_timeout 10s;
  ssl_stapling on;
  ssl_stapling_verify on;
  ssl_trusted_certificate /usr/local/nginx/conf/ssl/server.mydomain.com/server.mydomain.com-acme.cer;

        root   html;
        access_log              /var/log/nginx/localhost.access.log     main;
        error_log               /var/log/nginx/localhost.error.log      error;

# ngx_pagespeed & ngx_pagespeed handler
#include /usr/local/nginx/conf/pagespeed.conf;
#include /usr/local/nginx/conf/pagespeedhandler.conf;
#include /usr/local/nginx/conf/pagespeedstatslog.conf;

# limit_conn limit_per_ip 16;
# ssi  on;

        location /nginx_status {
        stub_status on;
        access_log   off;
        allow 127.0.0.1;
        #allow youripaddress;
        deny all;
        }

            location / {

# block common exploits, sql injections etc
#include /usr/local/nginx/conf/block.conf;

#Enables directory listings when index file not found
#autoindex  on;
 
            }

include /usr/local/nginx/conf/staticfiles.conf;
include /usr/local/nginx/conf/include_opcache.conf;
include /usr/local/nginx/conf/php.conf;
#include /usr/local/nginx/conf/phpstatus.conf;
include /usr/local/nginx/conf/drop.conf;
#include /usr/local/nginx/conf/errorpage.conf;
#include /usr/local/nginx/conf/vts_mainserver.conf;

       }

Don't know if an autoupdate of phpMyAdmin change something

 

I think the problem is related to the auto updated (using the cron) two days ago to the latest version phpMyAdmin 5.0.0 and that cause the issue... or maybe there was a conflict as they release at the same time the 4.9.3 for the old version...?

It will be great if we can fix this error and move to the latest version 5.

 

Yes i can see my domain and hostname and another one...

The problem started when the latest version installed automatically from the cron....

Also if i try to login the phpMyAdmin is not usable at all

So i can't use it and just ignore that message.

Thanks !

 

I got this when i run the installer:

Code:

Warning: detected possible duplicate server_name entry
main hostname vhost server_name value has to be unique
and separate from any other nginx vhost site you addded
Check your server_name in /usr/local/nginx/conf/conf.d/virtual.conf
read Step 1 of Getting Started Guide for main hostname
proper setup https://centminmod.com/getstarted.html

But i think that file is not in used as i have the virtual.ssl.conf ?

Should i rename the virtual.conf ?

 

Yes it works ! No issues at all using your script for the 4.x installation.

So it seems that the issue is related to latest v5.0 ...

Let's hope that we will have a fix asap

 

@jcat

Did you report the database export issue so they can fix it?

 

I was trying to avoid the ugly warning about not a valid certificate and i had to accept every time....

Ok thanks for the info

Let's hope that they will fix v5 so we can use it

 

server-side HTTPS detection misses support for Forwarded HTTP Extension (RFC 7239) · Issue #15200 · phpmyadmin/phpmyadmin

@eva2000

Can you please add that fix in the script so we will be able to use the latest version?

Thank you

 

@eva2000

The solution posted at Phpmyadmin is:

Can you please add that yarn command after git pull to see if that fixes the problem for Centminmod users also?

If yes then we can enable the auto update cron and get the latest version

Thanks

 

I thought it was for the mismatch error