Katello (maybe Foreman too?) dev server browser error workaround

John_Mitsch · January 8, 2021, 7:35pm

Many of us are seeing NS_ERROR_NET_INADEQUATE_SECURITY or similar browser error when going to https://$HOSTNAME:3808, which is where webpack assets are served. This is happening on new devel boxes.

I looked into this today and was able to come up with a hacky workaround:

gist.github.com

https://gist.github.com/johnpmitsch/95b9d631935115ca91c46efecb115464

w.md

go to `node_modules/webpack-dev-server/lib/Server.js` in `~/foreman`

around line 496 change `protocols: ['h2', 'http/1.1']` to `protocols: ['http/1.1']` (remove `h2` from the array)

start dev server

NOTE: this will be overwritten when you npm install again

My understanding is we are using HTTP/2 and the certs used don’t have the TLS requirements for HTTP/2 required by the browser. Switching to HTTP/1.1, which the above change does, “fixes” it.

It looks like webpack uses katello’s apache certs, assuming it’s still using $WEBPACK_OPTS from .env. However, even the self-signed ones that are generated by webpack are causing the same error (when you remove the cert arguments from webpack-dev-server but keep --https it will generate it’s own self-signed certificate).

I’m not sure what exactly changed - Did we start using HTTP/2 for webpack somehow? Something changed in the installer? Something expired in 2021?

This is where my investigation ends, but maybe someone has an idea of how to debug further so we can permanently fix this in the dev environment!

John_Mitsch · January 8, 2021, 7:38pm

webpack-dev-server does have an option to disable http2, but it’s not present in the version we use

ezr-ondrej · January 8, 2021, 10:39pm

Is it time to upgrade our webpack-dev-server and mainly… webpack? xD

ezr-ondrej · January 8, 2021, 10:40pm

Thanks for the workaround tho, it’s very annoying

John_Mitsch · January 11, 2021, 2:56pm

Ideally yes

If we can come up with a solution or better workaround for this version that would be ideal, I’m not sure how long that would take to upgrade webpack.