Sitecore CM returning 404 when running in docker container

Question

I am running Sitecore XP1 topology in docker containers. I am facing following issues :

1)I am getting SSL warning even after running init.ps1 script & generating certificates :

2. Sitecore default Login screen is appearing, but after Login, I am getting 404 page :

3. After logging in, I am getting following page :

4. I am also getting InvalidRequestSitecoreLayoutServiceClientException while trying to navigate Rendering Host :

5)Although, I am successfully able to navigate to the Site Host, without any errors :

Could anyone please help me out, I did check CM logs, not any significant issue I noticed there, also all containers are also up & running.

Thank you.

Answer 1

My approach is to only serve traffic to the browsers through Traefik with HTTPS only. There is an issue when redirecting from Identity Server back to Content Management during the login process. To overcome this, I have forced all connection with HTTPS only by setting up HSTS headers in CM service.

The following is my Traefik labels for CM

    labels:
    - "traefik.enable=true"
    - "traefik.http.middlewares.force-STS-Header.headers.forceSTSHeader=true"
    - "traefik.http.middlewares.force-STS-Header.headers.stsSeconds=31536000"
    - "traefik.http.routers.cm-secure.entrypoints=websecure"
    - "traefik.http.routers.cm-secure.rule=Host(`${CM_HOST}`)"
    - "traefik.http.routers.cm-secure.tls=true"
    - "traefik.http.routers.cm-secure.middlewares=force-STS-Header"

Answer 2

So, it turns out that the init.ps1 script generates the certificates using wildcard characters, which get updated in traefik -> certs folder. Due to this, I was facing the SSL issue.

To resolve this, I first removed the certificates generated by wildcard characters from the location docker\traefik\certs.

Then I followed the following steps :

1. Copy the mkcert.exe from the docker\traefik\certs folder to the root level of your solution.

2. Run the following commands to generate the certificates in the docker\traefik\certs folder :

mkcert -install

mkcert -cert-file docker\traefik\certs{YOUR_CD_HOSTNAME}.localhost.crt -key-file docker\traefik\certs{YOUR_CD_HOSTNAME}.localhost.key "{YOUR_CD_HOSTNAME}.localhost"

mkcert -cert-file docker\traefik\certs{YOUR_CM_HOSTNAME}.localhost.crt -key-file docker\traefik\certs{YOUR_CM_HOSTNAME}.localhost.key "{YOUR_CM_HOSTNAME}.localhost

mkcert -cert-file docker\traefik\certs{YOUR_ID_SERVER_HOSTNAME}.localhost.crt -key-file docker\traefik\certs{YOUR_ID_SERVER_HOSTNAME}.localhost.key {YOUR_ID_SERVER_HOSTNAME}.localhost"

mkcert -cert-file docker\traefik\certs{YOUR_RENDERING_HOSTNAME}.localhost.crt -key-file docker\traefik\certs{YOUR_RENDERING_HOSTNAME}.localhost.key "{YOUR_RENDERING_HOSTNAME}.localhost"

After generating these certificates, just update the certs_config.yaml file at docker\traefik\config\dynamic folder with the following content :

tls:
  certificates:
    - certFile: C:\etc\traefik\certs\{YOUR_CD_HOSTNAME}.localhost.crt
      keyFile: C:\etc\traefik\certs\{YOUR_CD_HOSTNAME}.localhost.key
    - certFile: C:\etc\traefik\certs\{YOUR_CM_HOSTNAME}.localhost.crt
      keyFile: C:\etc\traefik\certs\{YOUR_CM_HOSTNAME}.localhost.key
    - certFile: C:\etc\traefik\certs\{YOUR_ID_SERVER_HOSTNAME}.localhost.crt
      keyFile: C:\etc\traefik\certs\{YOUR_ID_SERVER_HOSTNAME}.localhost.key
    - certFile: C:\etc\traefik\certs\{YOUR_RENDERING_HOSTNAME}.localhost.crt
      keyFile: C:\etc\traefik\certs\{YOUR_RENDERING_HOSTNAME}.localhost.key