Docker NC21 collabora issue

wwe · August 20, 2021, 8:09pm

Hi all, finally collabora folks resolved the problem. Many thanks!!

After update to collabora/code:6.4.10.10 documents load again!!

It looks the problem was here

github.com/CollaboraOnline/online

Loolwsd 6.4.10 - Debian 9 - SNI enforced on OwnCloud/NextCloud instance get a 403 reply on CODE

opened 03:38PM - 04 Jul 21 UTC

closed 10:40AM - 22 Jul 21 UTC

Athar42

bug unconfirmed

**Describe the bug** With the latest update to Loolwsd 6.4.10 (and other collab…ora updates related), the server can't work anymore on a client which used the "SSLStrictSNIVHostCheck" setting to ON. This setup was working prior the latest updates. **To Reproduce** Steps to reproduce the behavior: 1. On the client (hosting the NextCloud application for example), just set the "SSLStrictSNIVHostCheck" to ON 2. Try to open a document which Collabora would open, it will fail with an access denied. 3. Set the previous setting to off, test again, and it'll pass. **Expected behavior** Should work. **Actual behavior** Document can't load as the loolwsd service didn't comply with this Apache directive "SSLStrictSNIVHostCheck". **Desktop (please complete the following information)** - OS: Debian 9.13 - CODE : ``` # loolwsd --version-hash 51b8716 # loolwsd --version terminate called after throwing an instance of 'std::runtime_error' Abandon ``` **As you may see, even the "--version" is broken there** But in the log, we have this : `wsd-20943-20943 2021-07-04 15:30:34.621808 [ loolwsd ] INF Loolwsd version details: 6.4.10 - 51b8716 - on "Debian GNU/Linux 9 (stretch)"| wsd/LOOLWSD.cpp:4069` **Additional context** On the webserver : Error.log `[Sun Jul 04 17:04:41.466646 2021] [ssl:error] [pid:tid] AH02033: No hostname was provided via SNI for a name based virtual host` Access.log ``` CODE SERVER IP - - [04/Jul/2021:17:04:39 +0200] "GET /index.php/apps/richdocuments/wopi/files/32_odfl?access_token=WXYZ&access_token_ttl=0 HTTP/1.1" 403 2255 "-" "LOOLWSD HTTP Agent 6.4.10" CODE SERVER IP - - [04/Jul/2021:17:04:41 +0200] "GET /index.php/apps/richdocuments/wopi/files/32_odfl?access_token=WXYZ&access_token_ttl=0&permission=edit HTTP/1.1" 403 2255 "-" "LOOLWSD HTTP Agent 6.4.10" ``` On CODE server log : `wsd-00546-18244 2021-07-04 14:24:23.325579 [ docbroker_010 ] ERR Failed to add session to [/index.php/apps/richdocuments/wopi/files/32_odfl] with URI [https://TLD/index.php/apps/richdocuments/wopi/files/32_odfl?access_token=WXYZ&access_token_ttl=0&permission=edit]: WOPI::CheckFileInfo failed: <!DOCTYPE html>` The SNI setting is enforced like this since a few months now, and was working at least 3 weeks back, so something might got broken in the recent update, hope you have all the needed infos. Edit : This issue happen only on a multiple domains server (several virtual hosts). I just did a test : NextCloud Virtual Host : SSLStrictSNIVHostCheck On OwnCloud Virtual Host : SSLStrictSNIVHostCheck Off This setup is working and both can use the same CODE server. As soon as I put the "OwnCloud" to On, both fail. Previously, this was a global variable, for the whole server, and this was working (so both to "On"). CODE updated to 6-4-10.2 without change.

some references to collabora forum (multiple user report it works with 6.4.10.6):

CODE 6.4.10_Docker - Nextcloud (Not working)

CODE connecting 0%: cannot connect to ods-document / stops working(https://forum.collaboraonline.com/t/code-connecting-0-cannot-connect-to-ods-document-stops-working/468)

CODE 6.4.10 - Well, this is embarrassing #2771