Wrong data on my instance #195

nicfab · 2022-09-18T08:05:16Z

nicfab
Sep 18, 2022

I set the instance correctly, but on the public instances web page, I see some wrong values and particularly:

TLS: it results in "E, ?", but I did several checking by online tools, and it results in the value "A+";
CSP: it results in a "D," but if I click on "D," the Mozilla Observatory web page shows the value "A+";
IPV6: it results in "N," but I set the IPV6 address in the DNS as an AAA record, and you can see it by passing the mouse on the "Network" field (in my case Amazon).

I know that the public instances page refreshes automatically, but my values are the same as yesterday.

Can you check it, please?

tiekoetter · 2022-09-18T08:21:52Z

tiekoetter
Sep 18, 2022
Maintainer

If you address the things I mentioned yesterday the issues would resolve by itself.

There is nothing to check if it is still wrong.

20 replies

nicfab Sep 18, 2022
Author

@nicfab No problem. I will probably include everything we learned from this discussions in the documentation.

Please don't get the image that we might be annoyed with you or something. It is quite the opposite; The documentation seems to not be clear enough for new people to dive right into it. Most people would have probably dropped their ideas and moved on but you kept pushing. Thank you for that!

Thank you again. I agree with you.
Let me know if I can be helpful to you.
Improving the documentation is an excellent thing.
I am not a developer, but passionate about computer science.
I often find technical documentation unclear to people who don't know the project.
I am at your disposal.

nicfab Sep 18, 2022
Author

Lastly, I want to set up the SSL certificate I bought from HARICA for the onion address.
I tried pointing to the path in the nginx file, but it asks for the password, and I don't know how to do it.
When you have time and want to help me, you can tell me how to do it.

tiekoetter Sep 18, 2022
Maintainer

@nicfab Yes I can help you. Maybe later today or tomorrow afternoon.

For the password do you mean that the private key has password protection? You could try https://www.nginx.com/blog/secure-distribution-ssl-private-keys-nginx/

nicfab Sep 18, 2022
Author

@nicfab Yes I can help you. Maybe later today or tomorrow afternoon.

For the password do you mean that the private key has password protection? You could try https://www.nginx.com/blog/secure-distribution-ssl-private-keys-nginx/

Thank you very much; take your time.
Regarding the password, yes, it's the password protection of the certificate.
Let's update tomorrow.

nicfab Sep 19, 2022
Author

@nicfab Yes I can help you. Maybe later today or tomorrow afternoon.

For the password do you mean that the private key has password protection? You could try https://www.nginx.com/blog/secure-distribution-ssl-private-keys-nginx/

@tiekoetter I set up correctly the SSL certificate for the onion address and the redirect to HTTPS.
Now it works fine.
If you want to check, the address is: http://lgmekfnpealdqhnctyg3p5fuelpdwnbqbwnl2ickpdoodzatzgz27ryd.onion

dalf · 2022-09-18T09:01:49Z

dalf
Sep 18, 2022
Maintainer

About IPv6: it seems the HTTP server doesn't listen on the HTTP and HTTPS ports.

$ curl -6 -vvvv https://searxng.nicfab.it/
*   Trying 2a05:d01a:ece:df00:5f20:a74d:75a1:d17b:443...
* TCP_NODELAY set
* connect to 2a05:d01a:ece:df00:5f20:a74d:75a1:d17b port 443 failed: Connection refused
* Failed to connect to searxng.nicfab.it port 443: Connection refused
* Closing connection 0
curl: (7) Failed to connect to searxng.nicfab.it port 443: Connection refused

3 replies

nicfab Sep 18, 2022
Author

About IPv6: it seems the HTTP server doesn't listen on the HTTP and HTTPS ports.

$ curl -6 -vvvv https://searxng.nicfab.it/
*   Trying 2a05:d01a:ece:df00:5f20:a74d:75a1:d17b:443...
* TCP_NODELAY set
* connect to 2a05:d01a:ece:df00:5f20:a74d:75a1:d17b port 443 failed: Connection refused
* Failed to connect to searxng.nicfab.it port 443: Connection refused
* Closing connection 0
curl: (7) Failed to connect to searxng.nicfab.it port 443: Connection refused

Thank you @dalf
I deleted ipv6only=off from nginx, and now the result of curl -6 -vvvv https://searxng.nicfab.it/ is the following:

*   Trying 2a05:d01a:ece:df00:5f20:a74d:75a1:d17b:443...
* TCP_NODELAY set
* Connected to searxng.nicfab.it (2a05:d01a:ece:df00:5f20:a74d:75a1:d17b) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: CN=searxng.nicfab.it
*  start date: Sep 18 08:22:47 2022 GMT
*  expire date: Dec 17 08:22:46 2022 GMT
*  subjectAltName: host "searxng.nicfab.it" matched cert's "searxng.nicfab.it"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
> GET / HTTP/1.1
> Host: searxng.nicfab.it
> User-Agent: curl/7.68.0
> Accept: */*
>
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
* Mark bundle as not supporting multiuse
< HTTP/1.1 200 OK
< Server: nginx/1.18.0 (Ubuntu)
< Date: Sun, 18 Sep 2022 09:57:18 GMT
< Content-Type: text/html; charset=utf-8
< Content-Length: 6814
< Connection: keep-alive
< Server-Timing: total;dur=2.863, render;dur=1.159
< X-Content-Type-Options: nosniff
< X-XSS-Protection: 1; mode=block
< X-Download-Options: noopen
< X-Robots-Tag: noindex, nofollow
< Referrer-Policy: no-referrer
< Strict-Transport-Security: max-age=63072000; includeSubdomains
< X-Frame-Options: DENY
< X-Content-Type-Options: nosniff
< Content-Security-Policy: default-src 'self';
< Onion-Location: http://lgmekfnpealdqhnctyg3p5fuelpdwnbqbwnl2ickpdoodzatzgz27ryd.onion/
<
<!DOCTYPE html>
<html class="no-js theme-auto center-aligment-no" lang="en-EN" >
<head>
  <meta charset="UTF-8" />
  <meta name="description" content="SearXNG — a privacy-respecting, hackable metasearch engine">
  <meta name="keywords" content="SearXNG, search, search engine, metasearch, meta search">
  <meta name="generator" content="searxng/2022.09.17-b3708e41">
  <meta name="referrer" content="no-referrer">
  <meta name="robots" content="noarchive">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <meta name="HandheldFriendly" content="True">
  <meta http-equiv="X-UA-Compatible" content="IE=edge, chrome=1">
  <title>SearXNG NicFab</title>
  <link rel="stylesheet" href="/searxng/static/themes/simple/css/searxng.min.css?de4e41414a4d183ce1a0cf1d5b8c18f03f2a73cb" type="text/css" media="screen" />
  <!--[if gte IE 9]>-->
  <script src="/searxng/static/themes/simple/js/searxng.head.min.js?20e3306580fcabadf100ed3b88304a00c47e2efe" client_settings="eyJhdXRvY29tcGxldGVfcHJvdmlkZXIiOiAiZHVja2R1Y2tnbyIsICJhdXRvY29tcGxldGVfbWluIjogNCwgImh0dHBfbWV0aG9kIjogIlBPU1QiLCAiaW5maW5pdGVfc2Nyb2xsIjogZmFsc2UsICJ0cmFuc2xhdGlvbnMiOiB7Im5vX2l0ZW1fZm91bmQiOiAiTm8gaXRlbSBmb3VuZCIsICJTb3VyY2UiOiAiU291cmNlIiwgImVycm9yX2xvYWRpbmdfbmV4dF9wYWdlIjogIkVycm9yIGxvYWRpbmcgdGhlIG5leHQgcGFnZSJ9LCAic2VhcmNoX29uX2NhdGVnb3J5X3NlbGVjdCI6IHRydWUsICJob3RrZXlzIjogZmFsc2UsICJ0aGVtZV9zdGF0aWNfcGF0aCI6ICIvc2VhcnhuZy9zdGF0aWMvdGhlbWVzL3NpbXBsZSJ9"></script>
  <!--<![endif]-->
  <link title="SearXNG NicFab" type="application/opensearchdescription+xml" rel="search" href="/searxng/opensearch.xml?method=POST&amp;autocomplete=duckduckgo"/>
  <link rel="icon" href="/searxng/static/themes/simple/img/favicon.png?aadae686b35ad9af5975d2623d397808d0e5db35" sizes="any">
  <link rel="icon" href="/searxng/static/themes/simple/img/favicon.svg?ee99f2c4793c32451062177672c8ab309dbef940" type="image/svg+xml">
</head>
<body class="index_endpoint" >
  <main id="main_index" class="">

    <nav id="links_on_top"><a href="/searxng/info/en/about" class="link_on_top_about"><svg class="ion-icon-big" viewBox="0 0 512 512" aria-hidden="true"><path d="M248 64C146.39 64 64 146.39 64 248s82.39 184 184 184 184-82.39 184-184S349.61 64 248 64z" fill="none" stroke="currentColor" stroke-miterlimit="10" stroke-width="32"/><path fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="32" d="M220 220h32v116"/><path fill="none" stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="32" d="M208 340h88"/><path fill="currentColor" stroke="currentColor" stroke-linecap="round" d="M248 130a26 26 0 1026 26 26 26 0 00-26-26z"/></svg><span>About</span></a><a href="https://docs.searxng.org/donate.html" class="link_on_top_donate"><svg class="ion-icon-big" viewBox="0 0 512 512" aria-hidden="true"><path d="M352.92 80C288 80 256 144 256 144s-32-64-96.92-64c-52.76 0-94.54 44.14-95.08 96.81-1.1 109.33 86.73 187.08 183 252.42a16 16 0 0018 0c96.26-65.34 184.09-143.09 183-252.42-.54-52.67-42.32-96.81-95.08-96.81z" fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="32"/></svg><span>Donate</span></a><a href="/searxng/preferences" class="link_on_top_preferences"><svg class="ion-icon-big" viewBox="0 0 512 512" aria-hidden="true"><path d="M262.29 192.31a64 64 0 1057.4 57.4 64.13 64.13 0 00-57.4-57.4zM416.39 256a154.34 154.34 0 01-1.53 20.79l45.21 35.46a10.81 10.81 0 012.45 13.75l-42.77 74a10.81 10.81 0 01-13.14 4.59l-44.9-18.08a16.11 16.11 0 00-15.17 1.75A164.48 164.48 0 01325 400.8a15.94 15.94 0 00-8.82 12.14l-6.73 47.89a11.08 11.08 0 01-10.68 9.17h-85.54a11.11 11.11 0 01-10.69-8.87l-6.72-47.82a16.07 16.07 0 00-9-12.22 155.3 155.3 0 01-21.46-12.57 16 16 0 00-15.11-1.71l-44.89 18.07a10.81 10.81 0 01-13.14-4.58l-42.77-74a10.8 10.8 0 012.45-13.75l38.21-30a16.05 16.05 0 006-14.08c-.36-4.17-.58-8.33-.58-12.5s.21-8.27.58-12.35a16 16 0 00-6.07-13.94l-38.19-30A10.81 10.81 0 0149.48 186l42.77-74a10.81 10.81 0 0113.14-4.59l44.9 18.08a16.11 16.11 0 0015.17-1.75A164.48 164.48 0 01187 111.2a15.94 15.94 0 008.82-12.14l6.73-47.89A11.08 11.08 0 01213.23 42h85.54a11.11 11.11 0 0110.69 8.87l6.72 47.82a16.07 16.07 0 009 12.22 155.3 155.3 0 0121.46 12.57 16 16 0 0015.11 1.71l44.89-18.07a10.81 10.81 0 0113.14 4.58l42.77 74a10.8 10.8 0 01-2.45 13.75l-38.21 30a16.05 16.05 0 00-6.05 14.08c.33 4.14.55 8.3.55 12.47z" fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="32"/></svg><span>Preferences</span></a></nav>
<div class="index">
    <div class="title"><h1>SearXNG</h1></div>
<form id="search" method="POST" action="/searxng/search" role="search">
  <div id="search_header">
    <div id="search_view">
      <div class="search_box">
        <input id="q" name="q" type="text" placeholder="Search for..." autocomplete="off" autocapitalize="none" spellcheck="false" autocorrect="off" dir="auto" value="">
        <button id="clear_search" type="reset" aria-label="clear"><span class="hide_if_nojs"><svg class="ion-icon-big" viewBox="0 0 512 512" aria-hidden="true"><path fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="32" d="M368 368L144 144M368 144L144 368"/></svg></span><span class="show_if_nojs">clear</span></button>
        <button id="send_search" type="submit" aria-label="search"><span class="hide_if_nojs"><svg class="ion-icon-big" viewBox="0 0 512 512" aria-hidden="true"><path d="M221.09 64a157.09 157.09 0 10157.09 157.09A157.1 157.1 0 00221.09 64z" fill="none" stroke="currentColor" stroke-miterlimit="10" stroke-width="32"/><path fill="none" stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="32" d="M338.29 338.29L448 448"/></svg></span><span class="show_if_nojs">search</span></button>
      </div>
    </div>
  </div>
  <input type="hidden" name="category_general" value="1" >
  <input type="hidden" name="language" value="en" >
  <input type="hidden" name="time_range" value="" >
  <input type="hidden" name="safesearch" value="2" >
  <input type="hidden" name="theme" value="simple" >
</form></div>
  </main>
  <footer>
    <p>
    Powered by <a href="/searxng/info/en/about">searxng</a> - 2022.09.17-b3708e41 — a privacy-respecting, hackable metasearch engine<br/>
        <a href="https://github.com/searxng/searxng">Source code</a>
        | <a href="https://github.com/searxng/searxng/issues">Issue tracker</a>
| <a href="/searxng/stats">Engine stats</a>        | <a href="https://searx.space">Public instances</a>
        | <a href="mailto:[email protected]">Contact instance maintainer</a>
    </p>
  </footer>
  <!--[if gte IE 9]>-->
  <script src="/searxng/static/themes/simple/js/searxng.min.js?35952b09f314bcafca463675f8ff0a996430454c"></script>
  <!--<![endif]-->
</body>
* Connection #0 to host searxng.nicfab.it left intact

Should is it ok, now?

unixfox Sep 18, 2022
Maintainer

Seems ok: https://ready.chair6.net/?url=searxng.nicfab.it

"IPv6 Connectivity: PASS"

nicfab Sep 18, 2022
Author

Seems ok: https://ready.chair6.net/?url=searxng.nicfab.it

"IPv6 Connectivity: PASS"

Thank you very much

nicfab · 2022-09-18T17:25:23Z

nicfab
Sep 18, 2022
Author

Unfortunately, I continue seeing incorrect data on my instance.
Time has passed since this morning.
Can you check, please?

9 replies

tiekoetter Sep 18, 2022
Maintainer

@nicfab Sorry for the delay – It reports everything as A+

nicfab Sep 18, 2022
Author

@tiekoetter No apology needed; don't worry.
Thank you very much.
I'll wait for the new info on the public instance webpage.

tiekoetter Sep 18, 2022
Maintainer

@nicfab The refresh happens at 00:00 UTC+1 and will be available at about 01:00 to 01:30 UTC+1.

nicfab Sep 18, 2022
Author

@nicfab The refresh happens at 00:00 UTC+1 and will be available at about 01:00 to 01:30 UTC+1.

Perfect. Thank you again

nicfab Sep 19, 2022
Author

Hello,

Unfortunately, nothing changed.
Can you check what the issue is?

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Wrong data on my instance #195

{{title}}

Replies: 3 comments 32 replies

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

Wrong data on my instance #195

nicfab Sep 18, 2022

Replies: 3 comments · 32 replies

tiekoetter Sep 18, 2022 Maintainer

nicfab Sep 18, 2022 Author

nicfab Sep 18, 2022 Author

tiekoetter Sep 18, 2022 Maintainer

nicfab Sep 18, 2022 Author

nicfab Sep 19, 2022 Author

dalf Sep 18, 2022 Maintainer

nicfab Sep 18, 2022 Author

unixfox Sep 18, 2022 Maintainer

nicfab Sep 18, 2022 Author

nicfab Sep 18, 2022 Author

tiekoetter Sep 18, 2022 Maintainer

nicfab Sep 18, 2022 Author

tiekoetter Sep 18, 2022 Maintainer

nicfab Sep 18, 2022 Author

nicfab Sep 19, 2022 Author

nicfab
Sep 18, 2022

Replies: 3 comments 32 replies

tiekoetter
Sep 18, 2022
Maintainer

nicfab Sep 18, 2022
Author

nicfab Sep 18, 2022
Author

tiekoetter Sep 18, 2022
Maintainer

nicfab Sep 18, 2022
Author

nicfab Sep 19, 2022
Author

dalf
Sep 18, 2022
Maintainer

nicfab Sep 18, 2022
Author

unixfox Sep 18, 2022
Maintainer

nicfab Sep 18, 2022
Author

nicfab
Sep 18, 2022
Author

tiekoetter Sep 18, 2022
Maintainer

nicfab Sep 18, 2022
Author

tiekoetter Sep 18, 2022
Maintainer

nicfab Sep 18, 2022
Author

nicfab Sep 19, 2022
Author