# ERR Looks like SSL/TLS traffic on plain http port| wsd/COOLWSD.cpp:3373 **URL:** \ **Category:** Installation & Configuration\ **Created:** [June 3, 2022, 9:19pm UTC](https://forum.collaboraonline.com/t/err-looks-like-ssl-tls-traffic-on-plain-http-port-wsd-coolwsd-cpp-3373/1152 "2022-06-03T21:19:39Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![elhananjair](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.collaboraonline.com/elhananjair/32/452_2.png) [@elhananjair](https://forum.collaboraonline.com/u/elhananjair)\ **Post date:** [June 3, 2022, 9:19pm UTC](https://forum.collaboraonline.com/t/err-looks-like-ssl-tls-traffic-on-plain-http-port-wsd-coolwsd-cpp-3373/1152/1 "2022-06-03T21:19:39Z")
Hello friends, I am trying to set up Collabora online server on a dedicated server which is different from where am running nextcloud. Here is what I did on a server I installed Collabora online server. - **Installed native collabora package** | sudo dnf install coolwsd CODE-brand collaboraoffice - **Edited coolwsd.xml** | disabled SSL and enabled SSL termination - **Installed Apache and mod\_ssl** | sudo dnf install httpd mod\_ssl - **Configured reverse proxy for collabora** | reverse proxy for ssl termination ([Proxy settings — SDK https://sdk.collaboraonline.com/ documentation](https://sdk.collaboraonline.com/docs/installation/Proxy_settings.html#reverse-proxy-settings-in-apache2-config-ssl-termination)) | **collabora.conf** - **Installed certbot to certify my domain** | Used generated key and cert in collabora.conf \ section. That’s what I have done so far, now I have tested to connect to Collabora place from **Nextcloud** and **browser** (to access admin panel), Here are the errors am getting: - Trying to connect from **Nextcloud** , as [https://office.mydomain.com:443](https://office.mydomain.com:443) **Error: Could not establish connection to the Collabora Online server.** - Trying to access admin panel from **Browser (FIrefox)** **Error: Secure Connection Failed, Error code: SSL\_ERROR\_RX\_RECORD\_TOO\_LONG** **Coolwsd.service** showed me this as I try to connect from browser **[websrv\_poll] ERR Looks like SSL/TLS traffic on plain http port| wsd/COOLWSD.cpp:3373** * * * This is the way am trying to set up a dedicated Collabora online server: ![Collabora setup](https://europe1.discourse-cdn.com/flex013/uploads/collaboraonline/original/1X/8c0c00a8c9807af7b3d22f691194bddc642793aa.png) Here is my **collabora.conf** configuration: ```auto # generated 2021-06-12, Mozilla Guideline v5.6, Apache 2.4.48, OpenSSL 1.1.1d, intermediate configuration, no OCSP # https://ssl-config.mozilla.org/#server=apache&version=2.4.48&config=intermediate&openssl=1.1.1d&ocsp=false&guideline=5.6 # this configuration requires mod_ssl, mod_rewrite, and mod_headers RewriteEngine On RewriteCond %{REQUEST_URI} !^/\.well\-known/acme\-challenge/ RewriteRule ^(.*)$ https://%{HTTP_HOST}$1 [R=301,L] SSLEngine on # curl https://ssl-config.mozilla.org/ffdhe2048.txt >> /path/to/signed_cert_and_intermediate_certs_and_dhparams SSLCertificateFile /etc/letsencrypt/live/mydomain.com/fullchain.pem SSLCertificateKeyFile /etc/letsencrypt/live/mydomain/privkey.pem ServerName mydomain.com # enable HTTP/2, if available Protocols h2 http/1.1 # HTTP Strict Transport Security (mod_headers is required) (63072000 seconds) Header always set Strict-Transport-Security "max-age=63072000" ######################################## # Reverse proxy for Collabora Online # ######################################## AllowEncodedSlashes NoDecode ProxyPreserveHost On # static html, js, images, etc. served from coolwsd # browser is the client part of Collabora Online ProxyPass /browser http://127.0.0.1:9980/browser retry=0 ProxyPassReverse /browser http://127.0.0.1:9980/browser # WOPI discovery URL ProxyPass /hosting/discovery http://127.0.0.1:9980/hosting/discovery retry=0 ProxyPassReverse /hosting/discovery http://127.0.0.1:9980/hosting/discovery # Capabilities ProxyPass /hosting/capabilities http://127.0.0.1:9980/hosting/capabilities retry=0 ProxyPassReverse /hosting/capabilities http://127.0.0.1:9980/hosting/capabilities # Main websocket ProxyPassMatch "/cool/(.*)/ws$" ws://127.0.0.1:9980/cool/$1/ws nocanon # Admin Console websocket ProxyPass /cool/adminws ws://127.0.0.1:9980/cool/adminws # Download as, Fullscreen presentation and Image upload operations ProxyPass /cool http://127.0.0.1:9980/cool ProxyPassReverse /cool http://127.0.0.1:9980/cool # Compatibility with integrations that use the /lool/convert-to endpoint ProxyPass /lool http://127.0.0.1:9980/cool ProxyPassReverse /lool http://127.0.0.1:9980/cool # intermediate configuration SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1 SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 SSLHonorCipherOrder off SSLSessionTickets off ``` I have been struggling with this issue for like 4 days, Please help. ---
**Author:** ![elhananjair](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.collaboraonline.com/elhananjair/32/452_2.png) [@elhananjair](https://forum.collaboraonline.com/u/elhananjair)\ **Post date:** [June 5, 2022, 2:00am UTC](https://forum.collaboraonline.com/t/err-looks-like-ssl-tls-traffic-on-plain-http-port-wsd-coolwsd-cpp-3373/1152/2 "2022-06-05T02:00:47Z")
No one replied yet, I finally fixed a minor mistake I have made. For these whole issues the case is I didn’t know that when I installed coolwsd, default apache configuration file would be created inside `/etc/http/conf/ `. I created my own config file inside `/etc/httpd/conf.d/`. Now I just copy-pasted contents from my custom config file to the default one and it worked fine. I would suggest if such thing can be included in documentation.