Announcement

Collapse
No announcement yet.

Install without SSL for local testing

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Install without SSL for local testing

    I am installing EspoCRM on localhost for developer testing only. A live instance of EspoCRM would be on a separate server with valid SSL certificate.

    The problem is, EspoCRM requires OpenSSL for security. However, I have already restricted my local Apache server to requests from 127.0.0.1, so my installation is as secure as necessary for a developer machine.

    In short, I would like to install EspoCRM on localhost with OpenSSL disabled, no certificate. Is that possible? I see this Github issue, but no explanation for how to invoke the parameter "sslVerifyDisabled" during the install:

    <https://github.com/espocrm/espocrm/issues/1889>

    For comparison, WordPress also requires SSL for their "application passwords" feature, but still allows manual bypass for localhost installations:

    <https://wordpress.stackexchange.com/questions/383244/application-passwords-not-working-on-localhost>
    <https://developer.wordpress.org/reference/functions/wp_is_application_passwords_available/>
    I suggest to include PDO::MYSQL_ATTR_SSL_VERIFY_SERVER_CERT as param in https://github.com/espocrm/espocrm/blob/master/application/Espo/Core/Utils/Database/Helper.php#L162 in order to disable verif...

  • #2
    Hi stephen.green,

    You can easily install EspoCRM on localhost without SSL certificate and use it in HTTP mode for testing purposes.
    There is the possibility to install EspoCRM by using scrip:


    This script automatically installs latest EspoCRM as a Docker image with NGINX server and MySQL database.

    Comment


    • #3
      Thank you, I wasn't aware of that alternative path for installation.

      Comment

      Working...
      X