Devilbox: https support on Devilbox

[sebastienserre]

Hello,
Is it possible to have a self signed SSL to run an https on Devilbox?
If right, then is there any tutorial somewhere ?

[cytopia]

@sebastienserre not at the moment. SSL support is coming in the first quarter of this year.

[aditya43]

@cytopia, Thanks for the great work.

Please add SSL support as soon as possible. It would be great if you could also add some devilish commands to automate most of the process for creating self signed certificates for local development.purposes.

Cheers!

[johnwbaxter]

I would love to see this added too. Again, moving from a different setup where i have SSL for a lot of projects so to be able to use this would need https! Thanks!!

[cytopia]

Is it generally possible to have a wildcard certificate for e.g. *.dev or does it only work with domains?

[johnwbaxter]

As far as i'm aware, browsers wont trust a certificate that covers a whole TLD so pretty sure that wouldn't work. It would have to be per domain *.project1.loc

[cytopia]

Then I guess certificates will have to be created for each available project on startup (or at least check if the currently available cert [if any] matches the current chosen TLD_SUFFIX).

[johnwbaxter]

I would say that is your only option, yes.

[johnwbaxter]

Hi! Do you have ETA on this one at all?

[cytopia]

There is actually and I wanted to have it implemented by know, however I am still working on the documentation which took a little longer than expected.
This is scheduled when the documentation is finished: https://github.com/cytopia/devilbox/pull/186

[johnwbaxter]

So awesome. Thanks!! :)

[yannandco]

Ooooh yes please! Ssl would be an awesome feature to add!
Thx for the great work!

[cytopia]

@sebastienserre @aditya43 @johnwbaxter @yannandco @henscu @masiorama @alexagui @mrpsiho @mcliment

FYI: Work on HTTPS integration has been started already. See below for Roadmap and progress.

---

Roadmap

1. [X] Implement SSL in vhost-gen: https://github.com/devilbox/vhost-gen/pull/24
2. [x] Implement SSL in Nginx stable: https://github.com/devilbox/docker-nginx-stable/pull/9
3. [x] Implement SSL in Nginx mainline: https://github.com/devilbox/docker-nginx-mainline/pull/10
4. [x] Implement SSL in Apache 2.2: https://github.com/devilbox/docker-apache-2.2/pull/9
5. [x] Implement SSL in Apache 2.4: https://github.com/devilbox/docker-apache-2.4/pull/9
6. [x] Implement SSL in Devilbox: https://github.com/cytopia/devilbox/pull/239
7. [x] Add documentation

Features

• Vhosts are available by http and https
• Self-signed certificates are created automatically for each vhost
• Be able to use your own certificates as well

Comments

Let me know of any features or ideas.

ETA

~There will be a WIP branch probably by the end of this week for at least one webserver~

WIP branch: https://github.com/cytopia/devilbox/pull/239

[cytopia]

I will create a CA, that is mounted to the Devilbox git directory and only created if it is not present (should not overwrite an existing CA). All subsequent vhost SSL certificates are signed by that CA. This allows you to import the mounted CA file into Chrome/FF/IE and regardless of Devilbox restarts or recreation of site certificates, you will always get a valid certificate for each project.

[cytopia]

Devilbox on SSL

First working version is ready to check out. Instructions in PR: https://github.com/cytopia/devilbox/pull/239

[cytopia]

I have created two scripts to easily generate CA's and certificates for SSL. If anyone here has some OpenSSL knowledge, please have a brief look and let me know if this is fine or needs some adjustments: https://github.com/devilbox/cert-gen

[cytopia]

Done

Looks like it is finished now. Only part that is missing is the documentation. Check out the PR and let me know how it works for you:

https://github.com/cytopia/devilbox/pull/239

[johnwbaxter]

So awesome. Thanks for implementing this!!!

[cytopia]

Released