Trying to connect to VPL jail from Moodle

Trying to connect to VPL jail from Moodle

by Mark Stern -
Number of replies: 6
I have set up VPL jail on an AWS EC2 instance. I have ports 80 and 443 open to my desktop and to our Moodle server. From my desktop, I can use a browser to access the OK endpoint on the jail server.

However, if I try to use a VPL assignment on Moodle, I usually get a popup (attached).Error message - using self signed certificate

I am indeed using a self-signed certificate, but the Moodle option Accept Self Signed Certificates is set to Yes, so it should not be a problem.
Very occasionally (about 1 in 10 attempts based on a small sample), it works, but nothing shows when I do
systemctl status vpl-jail-system
(so I wonder if it is sneakily using a different vpl jail).
Any idea what is going on?


 
Average of ratings: -
In reply to Mark Stern

Re: Trying to connect to VPL jail from Moodle

by Garth Brady -
Picture of Particularly helpful Moodlers
Please see the archived thread at the top of this forum. Search for 'Server 10' and note that the issues reported there revolve around Firewalls.
In reply to Garth Brady

Re: Trying to connect to VPL jail from Moodle

by Mark Stern -
I already opened the ports in the AWS firewall as I described above. Are there any other ports I need to open? I was not aware of the vpl jail's own firewall, but I just looked at the config file and it is set to 0.
In reply to Mark Stern

Re: Trying to connect to VPL jail from Moodle

by Garth Brady -
Picture of Particularly helpful Moodlers
Sounds like you weren't aware of the config procedure. Did you read BOTH manuals (server and plugin?): https://vpl.dis.ulpgc.es ?
In reply to Garth Brady

Re: Trying to connect to VPL jail from Moodle

by Mark Stern -
I did now.

Theory:
"Accept Self Signed Certificates" in the Moodle configuration only refers to the connection between Moodle and the Jail server.
My error is coming from the ws connection between the browser and the jail server.

Does my theory make sense?
If it is correct, I will presumably have to buy a domain name for the jail server so that I can get a (not self-certified) SSL certificate. 
In reply to Mark Stern

Re: Trying to connect to VPL jail from Moodle

by Garth Brady -
Picture of Particularly helpful Moodlers
I think you're on the right track here. I have VPL create its own self-signed cert and use a subdomain of the domain I own to host it (i.e. mymoodlesite.com has a subdomain called vpl.mymoodlesite.com where the jailserver resides). Do you not already own a domain for the moodle site?
In reply to Garth Brady

Re: Trying to connect to VPL jail from Moodle

by Mark Stern -
But you are using a self-signed cert? How does that help?