Issue getting webgl to work with HTTPS

[flint stump]

I have my webgl working just fine with the server on HTTP but it does not work on the HTTPS site. I followed these instructions: https://docs.unity3d.com/Packages/[email protected]/manual/https.html

but it still does not work. I then found this link:
https://github.com/MirrorNetworking/SimpleWebTransport/blob/master/HowToCreateSSLCert.md

but I do not have Unix and I can't seem to find the same thing for Windows.

I then saw this link with the reverse proxy
https://mirror-networking.gitbook.io/docs/manual/transports/websockets-transport

I am not sure if that would fix the issue though.
Any help is appreciated thanks.

[indigo flume]

If you're on a Windows server w/ IIS, definitely do the Reverse Proxy per that doc.

https://mirror-networking.gitbook.io/docs/manual/transports/websockets-transport/reverse-proxy

[flint stump]

I followed the directions. The first time I ran the webgl it ran fine but didn't connect to the server. I went to check the server and I didn't have the correct port. When I went back to my website it had timed out. Ever since then it will not load. It just keeps timing out. Not sure what is going on and why it loaded the first time and won't anymore

[indigo flume]

if you changed the port in the client build and re-deployed it, you need to clear your browser cache so it will download the new version.

[flint stump]

Turns out I had to add some mime types. The client now runs. However when it goes to connect to the server it says it is insecure and won't connect.
https://game.tamacorgi.io/

[indigo flume]

https://mirror-networking.gitbook.io/docs/manual/transports/websockets-transport/reverse-proxy

[flint stump]

I followed those instructions several times now and still not working. Here are some screen shots of my information

I put 27777 into the port when I built the server.

[indigo flume]

Firewall rule to allow incoming TCP on 7777 ?

Need to do similar in dashboard of whoever is hosting your server too, e.g. Azure / AWS / etc.

[flint stump]

Thanks, I have the port open, I even turned off the firewall. I have the game server hosted on the same server as the webgl. Is that an issue?

[flint stump]

I also ran the game server off the same physical server when I had the client on my webhosting through http with no issues.

[indigo flume]

This is fine...it's how I do it too, and how the doc reads. The WebGL build is in the default site, and game server is on same server (it has to be for Proxy to work)

This isn't in the doc, but you can put this in your custom network manager so you don't have to remember to change it when building server and client:

#if UNITY_SERVER
public override void Start()
{
    ((SimpleWebTransport)Transport.active).port = 27777;
    base.Start();
}
#endif

[indigo flume]

Set your Log Levels in SWT to Verbose and rebuild both server and client, re-deply, clear browser cache, and then see what you get

[flint stump]

I did all that. I get this error now in addition to the same errors I have been getting

Do I have to do something to start the server on the port 27777, or do I just start it like normal? Other than change the port in the transport. Like start it with a -p 27777 or something?

[indigo flume]

not with that script in place - it will use 27777 just by being a Dedicated Server build.

[indigo flume]

good - you got the 404 that I got when I did a test from here.

do you have your index.html in that site root folder?

[indigo flume]

yep that looks right

can you show your IIS manager with that site selected?

[indigo flume]

put your web.config in https://pastie.io/ please?

[flint stump]

https://pastie.io/coreta.xml

[indigo flume]

double click Default Document there - is index.html in the list?

meh it must be or you wouldn't get the client...nvm

[indigo flume]

You only needed those extra MIME types at the top because you didn't turn on one of the compressions (brotli / gzip) in player settings 🙂

[flint stump]

I tried them all and no compression to see if it did anything to fix the issue

[indigo flume]

Settings I use - Fallback has to be unchecked

[indigo flume]

is Verbose still live here? https://game.tamacorgi.io/

[flint stump]

yes

[indigo flume]

not seeing the 404 there in browser console

[flint stump]

Did you click after the helloss is shown? It changes scenes and then connects to the server at that point

[indigo flume]

You must not have an offline scene assigned since not getting thrown back to start

[flint stump]

no i don't

[flint stump]

I still have it

[indigo flume]

not seeing that...odd

[flint stump]

I just cleared my cache and reloaded and I still got the 404 error

[indigo flume]

which browser?

[flint stump]

firefox

[indigo flume]

show contents of Build folder

[indigo flume]

Can you find your IIS log from the path shown in Logging there?

[flint stump]

This if rom the W3SVC1 folder. There were no recent logs in the other folder

https://pastie.io/aldqle.less

[indigo flume]

This is what I was looking for
GET / - 7777 - 70.44.62.22 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/110.0.0.0+Safari/537.36+OPR/96.0.0.0 - 404 4 123 17
Indicates ARR isn't enabled I think

instead of the 404 there you should've seen localhost:27777 101 near the end of that line

do these steps to get into Configuration Editor and make sure enabled is true
https://mirror-networking.gitbook.io/docs/manual/transports/websockets-transport/reverse-proxy#windows-iis

[flint stump]

I had it set to true, I then reinstalled ARR so I guess it set it back to false. It is true now. I don't get the 404 error now but it still doesn't work. Here is the last entry in the log

https://pastie.io/tgmcwp.less

[indigo flume]

you clicked Apply when you changed it, and restarted IIS?

[flint stump]

Yes, I even did it again just to make sure , cleared cache and reloaded. Same error

[indigo flume]

This isn't a client issue - it's the server - double click all your bindings and make sure you do not have "Requires Server Name Indication" checked.

[flint stump]

There was one checked on the 443. I unchecked it and restarted everything but still have the issue

This message came from the server, not sure if it is helpful

https://pastie.io/rceyxu.css

[indigo flume]

sounds like they got connected at least - check client for error as to why they might've been kicked.
I'm helping two others - will circle back to this when I can.

[indigo flume]

any luck finding warnings / errors on client? Anything else logging on server?

[flint stump]

no luck

[flint stump]

I assume that the network address is fine.

That shouldn't change to localhost or anything???

[indigo flume]

that's correct for client. Server ignores it.

[indigo flume]

Try changing this to Tls 12 and rebuild the client

Also can try building a server and client of our Basic example (separate project if you don't have Mirror examples in your project) just to rule out it being something in your project.

[flint stump]

Switching to Tls 12 didn't work. Trying the examples now

[flint stump]

built it, same issue with the example

[indigo flume]

and direct connecting to the server port with SSL turned off works?

[flint stump]

I had http setup on a webhost using 7778 and I was able to connect and run it for 6 months now

server running on same server as now

[indigo flume]

IIS log is showing what now in logs...404, 502, 101?

[flint stump]

2023-03-30 18:19:37 47.87.169.74 GET / - 7777 - 70.44.62.22 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:109.0)+Gecko/20100101+Firefox/111.0 - 502 3 12029 2030

[indigo flume]

This is what you should see...

2023-03-28 02:49:27 W3SVC2 sv8714 1.2.3.4 GET / - 7777 - 1.2.3.4 HTTP/1.1 - - - localhost:27777 101 0 0 7822412 305739 377319
2023-03-28 02:49:27 W3SVC2 sv8714 1.2.3.4 GET / - 7777 - 1.2.3.4 HTTP/1.1 - - - localhost:27777 101 0 0 7910782 310613 383392
2023-03-28 02:49:27 W3SVC2 sv8714 1.2.3.4 GET / - 7777 - 1.2.3.4 HTTP/1.1 - - - localhost:27777 101 0 0 7843026 307434 379389

[indigo flume]

Reverse proxy isn't enabled or isn't capturing the match in the web.config for some reason

the request is getting past the proxy and into the web site handler (hence logging the browser agent).

From this screen....

Double Click URL Rewrite...

Click Add Rule(s)... [top right]

Double Click Reverse Proxy there - do you get any prompt or warning?

[flint stump]

I get this

[flint stump]

^

[indigo flume]

Cancel that...no other prompt before that?

[flint stump]

no

[indigo flume]

in Bindings, double click the 7777 binding, screenshot it

[indigo flume]

yes there - drill into 7777

[indigo flume]

k that's right

pastie.io your web.config again please

[flint stump]

https://pastie.io/uqwdjh.xml

[indigo flume]

It's got to be some little detail someplace - I've set this up on a few different servers with no issues

even works on an old Win Server 2012-R2 (yeah twenty-twelve) server

[indigo flume]

https://learn.microsoft.com/en-us/iis/extensions/troubleshooting-application-request-routing/troubleshooting-502-errors-in-arr

[indigo flume]

ERROR_WINHTTP_CANNOT_CONNECT
12029
Returned if connection to the server failed.```

[flint stump]

I set this up on another server that I have. I have also ran this same project from this other server for the http. Once again, I get the same error as before.

[indigo flume]

I'm leaving to be out for a couple days - just want to check that your Application Pool's Basic Settings look like this

[flint stump]

yes

[flint stump]

^

[indigo flume]

I tried to connect to server (game.tamacorgi.io) directly on 27777 with SSL turned off and was refused - can you open that up in your host's routing and your firewall?

7777 with SSL on gives 502 Bad Gateway

[flint stump]

Long story short, my client was very pissed at me for not having this done. They missed their launch window and didn't have it running for their NFT mint.
I converted everything back to what I had working on http which was 7778. I had them create a redirect from their https to one of my http sites.
I took down the server running 27777.

[indigo flume]

I'm sorry about that...really I am.

I'd like to work out what went wrong, but I understand if you don't have the time / interest in pursuing it further.

[flint stump]

time is tight but I do want to fix it. I would like my company to be able to offer the service

Not to mention it isn't https secured right now

[indigo flume]

everything you showed me was like I have all 4 of the servers I've set up

When I wrote the guide doc, I started from a virgin server and wrote up every step.

[flint stump]

I have never worked with IIS which doesn't help either

[indigo flume]

on two of the servers I actually have a wildcard so a bunch of server instances can be running on a server on different ports and the rewrite rule forwards to the correct server based on the binding port they connected to by just prepending a 2 to the port

<rule name="Reverse Proxy" enabled="true" stopProcessing="true">
    <match url=".*" />
    <conditions logicalGrouping="MatchAll" trackAllCaptures="false">
        <add input="{SERVER_PORT}" pattern="\d+" />
    </conditions>
    <action type="Rewrite" url="http://localhost:2{C:0}" appendQueryString="false" logRewrittenUrl="true" />
</rule>

Then IIS just has bindings for a bunch of ports: 7777, 7778, 7779, etc. and WinAcme keeps the SSL's updated on all of them automatically.