Hi, I’m running Passbolt 4.0.12 and I want to change the fullBaseUrl from passbolt.mydomain.local to passbolt.otherdomain.local or other .com.
Can I do this without SSL certificate?
I cannot found the section of documentation where to find it, hope someone can help me thx
Hi @perfect4situa !
If you do so and have an SSL certificate that covers only the previous domain and not the new one, then the browsers will warn you that there is something suspicious happening. Most of the time, you might say to your browser that it is safe. However, it’s probably not the best idea (beside the security aspect of accepting a non valid certificate, if you have multiple users on the server they might be confused, and if you use the mobile app, it might not work anymore).
Some certificates may cover more than a single domain IIRC. But, it’s probably not your case.
There is documentation though about how to generate a new SSL certificate.
You can have a look here:
I pointed to Debian/Ubuntu but normally the openssl
command should be the same. But, if it’s not the right Os and you need to reconfigure your server then you might choose the right OS for you here.
Also, changing the url in any way will break extension registration for users. Users will need to re-register the browser extension via performing a recovery. This happens even when only changing http to https, but more obviously due to a different domain.
Hi Steph, thx for helping.
Did you find a procedure to change the URL in general? For example from passbolt.mydomain.local to passboltnew.mydomain.local?
Because I try to do that by change the passbolt.php file and the DNS record in my domain DNS but this is not working. I think there is a procedure to change the name globally but I don’t found it
There are potentially 3 places:
-
/etc/passbolt/passbolt.php
which tells the app what url to use, you know this one -
/etc/nginx/sites-enabled/(conf file)
which is the webserver’s config of domain for which to listen - your hosts file for dns
After modifying your NGINX config you can reload the service with:
sudo service nginx reload