How to enable https on rasa core server

Rasa Core version: 0.12.3 Python version: 3.6.7 Operating system (windows, osx, …): windows 7 64 bit

Issue:

Hey guys! So my bot is running on AWS and i’m getting the reply in my browser. But it’s a “http” i.e. it’s not secure port. I need secure port to run with my web app. Whenever I enable the SSL on port 5005 and try to run the bot it gives error and says,

File “/home/ubuntu/.local/lib/python3.6/site-packages/gevent/server.py”, line 256,│

in _tcp_listener │ sock.bind(address) │

OSError: [Errno 98] Address already in use: (‘0.0.0.0’, 5005)

Now when I disable my SSL and run the bot, It runs easily and replies on http call. So how can I convert this http to https? Any help is appreciated.

Content of domain file (if used & relevant):

[bikashkumars]

Your Rasa Core should be up and running on default port 5005 (If you are not dealing with specific requirement). So first check, you able to hit rasa core from postman or not. If that is ok.

Regarding Apache, you may follow this. Apache In Ubuntu Make sure Apache is listening on port 80 and 443.

Make sure you have followed these steps to make reverse proxy work.

#Enable SSL module of Apache $ sudo a2enmod ssl $ service apache2 reload $ service apache2 restart

#Install Certificate Create a directory called “certificates” at this location (or anything of your choice) $cd /etc/apache2/certificates Upload your certificate and private key to above location certificate.csr and certificate.key

$ cd /etc/apache2/sites-available $ vim default-ssl.conf

Add these contents to make your Apache HTTPs enabled

<IfModule mod_ssl.c>
    <VirtualHost _default_:443>
        ServerAdmin webmaster@localhost
        ServerName domain-name.com
        DocumentRoot /var/www/html
         
        ErrorLog ${APACHE_LOG_DIR}/error.log
        CustomLog ${APACHE_LOG_DIR}/access.log combined
         
        SSLEngine on
 
        SSLCertificateFile  /etc/apache2/certificates/certificate.cer
        SSLCertificateKeyFile  /etc/apache2/certificates/certificate.key
    </VirtualHost>
</IfModule>

#start $ service apache2 reload $ service apache2 restart

So now you should about to access your localhost in browser https://your-domain-name/

Make sure Apache Default page is coming over https

Now you need to do proxy forwarding to Rasa to port 5005

$ cd /etc/apache2/sites-available $ vim default-ssl.conf

Now you need to tell apache , to redirect all traffic to http/5005 port. that’s it.

<IfModule mod_ssl.c>
    <VirtualHost _default_:443>
        ServerAdmin webmaster@localhost
        ServerName domain-name.com
        DocumentRoot /var/www/html
         
        ErrorLog ${APACHE_LOG_DIR}/error.log
        CustomLog ${APACHE_LOG_DIR}/access.log combined
         
        SSLEngine on
 
        SSLCertificateFile  **/etc/apache2/certificates/certificate.cer**
        SSLCertificateKeyFile  **/etc/apache2/certificates/certificate.key**
 
                ProxyRequests     Off
                ProxyPreserveHost On
                ProxyPass /rasa/  http://localhost:5005/ nocanon
                ProxyPassReverse  /rasa/  http://localhost:5005
                
                AllowEncodedSlashes NoDecode
                RequestHeader set X-Forwarded-Proto "https"
                RequestHeader set X-Forwarded-Port "443"
                RedirectPermanent /rasa
     
                <Location http://localhost:5005/rasa*>
                   Order deny,allow
                   Allow from all
                </Location>
                <FilesMatch "\.(cgi|shtml|phtml|php)$">
                        SSLOptions +StdEnvVars
                </FilesMatch>
                <Directory /usr/lib/cgi-bin>
                        SSLOptions +StdEnvVars
                </Directory>
    </VirtualHost>
</IfModule>

#start $ service apache2 reload $ service apache2 restart

Now check https://your-domain-name/rasa/ and send some POSt request with body. It should be working

[bikashkumars]

Hi,

You need to use Proxy approach to solve this. In your AWS, install Apache Web Server or Nginx. Then Install your self-signed or CA signed certificate on Apache or Nginx. Then redirect traffic to Rasa.

Browser/Client -> https AWS -> AWS Apache -> Proxy forward to rasa over http -> rasa http

If you need more info on how to do it, reply back.