Cannot complete firewall configuration

  • Resolved wordcrunch

    (@wordcrunch)


    4 years, 9 months ago

    I am able to run the firewall auto config, it says “Installation Successful” but also has this message:

    The changes have not yet taken effect. If you are using LiteSpeed or IIS as your web server or CGI/FastCGI interface, you may need to wait a few minutes for the changes to take effect since the configuration files are sometimes cached. You also may need to select a different server configuration in order to complete this step, but wait for a few minutes before trying. You can try refreshing this page.

    When I check the diagnostics, under “Connectivity” there is this error:

    wp_remote_post() test back to this server failed! Response was: cURL error 60: Peer’s certificate issuer has been marked as not trusted by the user.

    wordfence-waf.php is present in the web root and prepended correctly in .htaccess

    It may be useful to note that I am running through Cloudflare using a shared Universal Cloudflare SSL certificate. This works fine for dozens of domains that I have on Cloudflare that are hosted on shared hosting (e.g. hostgator, godaddy, etc) but in this particular case I am using a dedicated server with a self-signed certificate to handle traffic between Cloudflare and the origin server. This is not optional – I’m not paying for another certificate, that would be completely pointless since I am communicating between two entities I manage (cloudflare and origin server). Furthermore, a self-signed certificate is MORE secure than any third party certificate for this specific application (I trust myself more than I trust Verisign or anyone else!). WordFence seems to think that this is a problem, please advise/fix.

    CentOS Linux 7.7.1908
    curl 7.29.0
    php 7.2.27
    WordPress 5.3.2
    WordFence 7.4.5

    Thanks a bunch!

    The page I need help with: [log in to see the link]

Viewing 10 replies - 1 through 10 (of 10 total)
  • Thread Starter wordcrunch

    (@wordcrunch)

    Apache 2.4.6-90

    Hey @wordcrunch,

    Can you send me a Diagnostics report so I can get a better overview of your environment(the URL could be helpful, which will be in the report)? Please navigate to Wordfence > Tools > Diagnostics. Here you can select SEND REPORT BY EMAIL. Please include your www.remarpro.com username and update this thread after you’ve sent it.

    Please let me know.

    Thanks,

    Gerroald

    Thread Starter wordcrunch

    (@wordcrunch)

    Sent, thanks!

    Hey @wordcrunch,

    Can you please disable the Enable SSL Verification feature found in Wordfence > Tools > Diagnostics > Debugging Options and let me know if it helps? It’s at the very bottom of the page.

    Please let me know how it goes.

    Thanks,

    Gerroald

    • This reply was modified 4 years, 9 months ago by WFGerroald.
    Thread Starter wordcrunch

    (@wordcrunch)

    Thanks again for the support! I did try disabling the SSL verification but it’s still not getting past the page with the notice “The changes have not yet taken effect. If you are using LiteSpeed or IIS as your web server or CGI/FastCGI interface, you may need to wait a few minutes for the changes to take effect since the configuration files are sometimes cached. You also may need to select a different server configuration in order to complete this step, but wait for a few minutes before trying. You can try refreshing this page.”

    Hey @wordcrunch,

    Thanks for the update.

    Can you please send a copy of your htaccess to [email protected]? Please title the subject attn: gerroald and update this thread in case there’s trouble receiving the email.

    Thanks,

    Gerroald

    Thread Starter wordcrunch

    (@wordcrunch)

    # BEGIN WordPress
    # The directives (lines) between BEGIN WordPress and END WordPress are
    # dynamically generated, and should only be modified via WordPress filters.
    # Any changes to the directives between these markers will be overwritten.
    # END WordPress
    # Wordfence WAF
    <IfModule mod_php5.c>
    php_value auto_prepend_file ‘/path_to_public_html/wordfence-waf.php’
    </IfModule>
    <IfModule mod_php7.c>
    php_value auto_prepend_file ‘/path_to_public_html/wordfence-waf.php’
    </IfModule>
    <Files “.user.ini”>
    <IfModule mod_authz_core.c>
    Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
    Order deny,allow
    Deny from all
    </IfModule>
    </Files>
    # END Wordfence WAF

    Hey @wordcrunch,

    Assuming that path_to_public is correct this could be a server configuration issue. Can you make sure AllowOverride is set to All in your httpd.conf?

    Note that you may need to manually restart Apache as well.

    Please let me know how it goes.

    Thanks,

    Gerroald

    Thread Starter wordcrunch

    (@wordcrunch)

    Lol OMG of course! Thank you thank you thank you thank you thank you!

    Hey @wordcrunch,

    No problem! A second pair of eyes is always useful.

    Please let us know if anything else comes up.

    Thanks,

    Gerroald

Viewing 10 replies - 1 through 10 (of 10 total)
  • The topic ‘Cannot complete firewall configuration’ is closed to new replies.