Login Not Responding

[yokohama1010]

After accessing the production FBCTF platform using the configured IP address and navigating to ‘login’, I found that the login button does not respond with the correct admin and password. Even if I put in the wrong password, no response. The rest of the page's buttons respond.

After looking at a lot of common issues, I found that there were a lot of issues with the certs for production deployment. I checked /etc/nginx/certs and fbctf.csr and fbctf.key are there. So I’m not sure if the issue lies there.

I also tried the dev deployment, but my issue still remains there as well.

I’m using VirtualBox and Ubuntu 14.04 desktop image.

My /var/log/nginx/error.log looks like:
2017/06/02 16:46:52 [warn] 3571#0: “ssl_stapling” ignored, issuer certificate not found

My provision script looks like:

[+] git is already installed. skipping.
[+] Provisioning in prod mode
[+] Using self certificate
[+] Source code folder /home/lukas/fbctf
[+] Destination folder /var/www/fbctf
[+] Creating code folder /var/www/fbctf
[+] Copying all CTF code to destination folder
[+] curl is already installed. skipping.
Hit http://dl.hhvm.com trusty InRelease
Ign http://us.archive.ubuntu.com trusty InRelease
Hit http://dl.hhvm.com trusty/main amd64 Packages
Get:1 http://us.archive.ubuntu.com trusty-updates InRelease [65.9 kB]
Get:2 http://security.ubuntu.com trusty-security InRelease [65.9 kB]
Ign http://extras.ubuntu.com trusty InRelease
Hit http://dl.hhvm.com trusty/main i386 Packages
Hit https://download.docker.com trusty InRelease
Hit https://download.docker.com trusty/stable amd64 Packages
Get:3 http://extras.ubuntu.com trusty Release.gpg [72 B]
Hit http://us.archive.ubuntu.com trusty-backports InRelease
Get:4 https://download.docker.com trusty/stable Translation-en_US
Hit http://extras.ubuntu.com trusty Release
Hit http://us.archive.ubuntu.com trusty Release.gpg
Get:5 http://us.archive.ubuntu.com trusty-updates/main Sources [399 kB]
Hit http://extras.ubuntu.com trusty/main Sources
Get:6 http://security.ubuntu.com trusty-security/main Sources [131 kB]
Ign http://dl.hhvm.com trusty/main Translation-en_US
Hit http://extras.ubuntu.com trusty/main amd64 Packages
Ign http://dl.hhvm.com trusty/main Translation-en
Get:7 http://us.archive.ubuntu.com trusty-updates/restricted Sources [6,331 B]
Hit http://extras.ubuntu.com trusty/main i386 Packages
Get:8 http://us.archive.ubuntu.com trusty-updates/universe Sources [180 kB]
Get:9 http://us.archive.ubuntu.com trusty-updates/multiverse Sources [7,764 B]
Get:10 http://us.archive.ubuntu.com trusty-updates/main amd64 Packages [985 kB]
Get:11 http://us.archive.ubuntu.com trusty-updates/restricted amd64 Packages [17.1 kB]
Get:12 http://us.archive.ubuntu.com trusty-updates/universe amd64 Packages [407 kB]
Get:13 http://security.ubuntu.com trusty-security/restricted Sources [4,955 B]
Get:14 http://us.archive.ubuntu.com trusty-updates/multiverse amd64 Packages [14.3 kB]
Get:15 http://security.ubuntu.com trusty-security/universe Sources [54.0 kB]
Get:16 http://us.archive.ubuntu.com trusty-updates/main i386 Packages [942 kB]
Get:17 http://us.archive.ubuntu.com trusty-updates/restricted i386 Packages [16.9 kB]
Get:18 http://us.archive.ubuntu.com trusty-updates/universe i386 Packages [409 kB]
Get:19 http://us.archive.ubuntu.com trusty-updates/multiverse i386 Packages [14.6 kB]
Get:20 http://security.ubuntu.com trusty-security/multiverse Sources [3,206 B]
Ign https://download.docker.com trusty/stable Translation-en_US
Get:21 http://us.archive.ubuntu.com trusty-updates/main Translation-en [486 kB]
Ign http://extras.ubuntu.com trusty/main Translation-en_US
Get:22 http://security.ubuntu.com trusty-security/main amd64 Packages [617 kB]
Ign https://download.docker.com trusty/stable Translation-en
Get:23 http://us.archive.ubuntu.com trusty-updates/multiverse Translation-en [7,430 B]
Ign http://extras.ubuntu.com trusty/main Translation-en
Get:24 http://us.archive.ubuntu.com trusty-updates/restricted Translation-en [3,978 B]
Get:25 http://us.archive.ubuntu.com trusty-updates/universe Translation-en [216 kB]
Hit http://us.archive.ubuntu.com trusty-backports/main Sources
Hit http://us.archive.ubuntu.com trusty-backports/restricted Sources
Hit http://us.archive.ubuntu.com trusty-backports/universe Sources
Hit http://us.archive.ubuntu.com trusty-backports/multiverse Sources
Hit http://us.archive.ubuntu.com trusty-backports/main amd64 Packages
Hit http://us.archive.ubuntu.com trusty-backports/restricted amd64 Packages
Hit http://us.archive.ubuntu.com trusty-backports/universe amd64 Packages
Hit http://us.archive.ubuntu.com trusty-backports/multiverse amd64 Packages
Hit http://us.archive.ubuntu.com trusty-backports/main i386 Packages
Hit http://us.archive.ubuntu.com trusty-backports/restricted i386 Packages
Hit http://us.archive.ubuntu.com trusty-backports/universe i386 Packages
Hit http://us.archive.ubuntu.com trusty-backports/multiverse i386 Packages
Hit http://us.archive.ubuntu.com trusty-backports/main Translation-en
Hit http://us.archive.ubuntu.com trusty-backports/multiverse Translation-en
Hit http://us.archive.ubuntu.com trusty-backports/restricted Translation-en
Hit http://us.archive.ubuntu.com trusty-backports/universe Translation-en
Hit http://us.archive.ubuntu.com trusty Release
Hit http://us.archive.ubuntu.com trusty/main Sources
Hit http://us.archive.ubuntu.com trusty/restricted Sources
Hit http://us.archive.ubuntu.com trusty/universe Sources
Hit http://us.archive.ubuntu.com trusty/multiverse Sources
Hit http://us.archive.ubuntu.com trusty/main amd64 Packages
Hit http://us.archive.ubuntu.com trusty/restricted amd64 Packages
Hit http://us.archive.ubuntu.com trusty/universe amd64 Packages
Hit http://us.archive.ubuntu.com trusty/multiverse amd64 Packages
Hit http://us.archive.ubuntu.com trusty/main i386 Packages
Hit http://us.archive.ubuntu.com trusty/restricted i386 Packages
Hit http://us.archive.ubuntu.com trusty/universe i386 Packages
Get:26 http://security.ubuntu.com trusty-security/restricted amd64 Packages [14.0 kB]
Hit http://us.archive.ubuntu.com trusty/multiverse i386 Packages
Get:27 http://security.ubuntu.com trusty-security/universe amd64 Packages [160 kB]
Hit http://us.archive.ubuntu.com trusty/main Translation-en
Hit http://us.archive.ubuntu.com trusty/multiverse Translation-en
Hit http://us.archive.ubuntu.com trusty/restricted Translation-en
Get:28 http://security.ubuntu.com trusty-security/multiverse amd64 Packages [4,133 B]
Hit http://us.archive.ubuntu.com trusty/universe Translation-en
Get:29 http://security.ubuntu.com trusty-security/main i386 Packages [575 kB]
Ign http://us.archive.ubuntu.com trusty/main Translation-en_US
Ign http://us.archive.ubuntu.com trusty/multiverse Translation-en_US
Ign http://us.archive.ubuntu.com trusty/restricted Translation-en_US
Ign http://us.archive.ubuntu.com trusty/universe Translation-en_US
Get:30 http://security.ubuntu.com trusty-security/restricted i386 Packages [13.7 kB]
Get:31 http://security.ubuntu.com trusty-security/universe i386 Packages [160 kB]
Get:32 http://security.ubuntu.com trusty-security/multiverse i386 Packages [4,289 B]
Hit http://security.ubuntu.com trusty-security/main Translation-en
Hit http://security.ubuntu.com trusty-security/multiverse Translation-en
Hit http://security.ubuntu.com trusty-security/restricted Translation-en
Hit http://security.ubuntu.com trusty-security/universe Translation-en
Fetched 5,985 kB in 9s (611 kB/s)
Reading package lists...
[+] language-pack-en is already installed. skipping.
[+] memcached is already installed. skipping.
[+] Installing MySQL
[+] mysql-server is already installed. skipping.
mysql stop/waiting
mysql start/running, process 2521
[+] software-properties-common is already installed. skipping.
[+] Adding HHVM key
Executing: gpg --ignore-time-conflict --no-options --no-default-keyring --homedir /tmp/tmp.9qBECcP9Qb --no-auto-check-trustdb --trust-model always --keyring /etc/apt/trusted.gpg --primary-keyring /etc/apt/trusted.gpg --recv-keys --keyserver hkp://keyserver.ubuntu.com:80 0x5a16e7281be7a449
[+] Adding HHVM repo
[+] Installing HHVM
Hit http://dl.hhvm.com trusty InRelease
Ign http://us.archive.ubuntu.com trusty InRelease
Hit https://download.docker.com trusty InRelease
Hit http://dl.hhvm.com trusty/main amd64 Packages
Hit https://download.docker.com trusty/stable amd64 Packages
Hit http://us.archive.ubuntu.com trusty-updates InRelease
Hit http://dl.hhvm.com trusty/main i386 Packages
Hit http://security.ubuntu.com trusty-security InRelease
Ign http://extras.ubuntu.com trusty InRelease
Hit http://us.archive.ubuntu.com trusty-backports InRelease
Hit http://us.archive.ubuntu.com trusty Release.gpg
Hit http://extras.ubuntu.com trusty Release.gpg
Hit http://security.ubuntu.com trusty-security/main Sources
Get:1 https://download.docker.com trusty/stable Translation-en_US
Hit http://us.archive.ubuntu.com trusty-updates/main Sources
Hit http://extras.ubuntu.com trusty Release
Hit http://security.ubuntu.com trusty-security/restricted Sources
Hit http://us.archive.ubuntu.com trusty-updates/restricted Sources
Hit http://us.archive.ubuntu.com trusty-updates/universe Sources
Hit http://security.ubuntu.com trusty-security/universe Sources
Hit http://extras.ubuntu.com trusty/main Sources
Hit http://us.archive.ubuntu.com trusty-updates/multiverse Sources
Hit http://us.archive.ubuntu.com trusty-updates/main amd64 Packages
Ign http://dl.hhvm.com trusty/main Translation-en_US
Hit http://security.ubuntu.com trusty-security/multiverse Sources
Hit http://extras.ubuntu.com trusty/main amd64 Packages
Ign http://dl.hhvm.com trusty/main Translation-en
Hit http://us.archive.ubuntu.com trusty-updates/restricted amd64 Packages
Hit http://us.archive.ubuntu.com trusty-updates/universe amd64 Packages
Hit http://security.ubuntu.com trusty-security/main amd64 Packages
Hit http://extras.ubuntu.com trusty/main i386 Packages
Hit http://us.archive.ubuntu.com trusty-updates/multiverse amd64 Packages
Hit http://security.ubuntu.com trusty-security/restricted amd64 Packages
Hit http://us.archive.ubuntu.com trusty-updates/main i386 Packages
Hit http://us.archive.ubuntu.com trusty-updates/restricted i386 Packages
Hit http://security.ubuntu.com trusty-security/universe amd64 Packages
Hit http://us.archive.ubuntu.com trusty-updates/universe i386 Packages
Hit http://us.archive.ubuntu.com trusty-updates/multiverse i386 Packages
Hit http://security.ubuntu.com trusty-security/multiverse amd64 Packages
Hit http://us.archive.ubuntu.com trusty-updates/main Translation-en
Hit http://us.archive.ubuntu.com trusty-updates/multiverse Translation-en
Hit http://security.ubuntu.com trusty-security/main i386 Packages
Hit http://security.ubuntu.com trusty-security/restricted i386 Packages
Hit http://us.archive.ubuntu.com trusty-updates/restricted Translation-en
Hit http://us.archive.ubuntu.com trusty-updates/universe Translation-en
Hit http://security.ubuntu.com trusty-security/universe i386 Packages
Hit http://us.archive.ubuntu.com trusty-backports/main Sources
Hit http://security.ubuntu.com trusty-security/multiverse i386 Packages
Hit http://us.archive.ubuntu.com trusty-backports/restricted Sources
Hit http://us.archive.ubuntu.com trusty-backports/universe Sources
Hit http://security.ubuntu.com trusty-security/main Translation-en
Hit http://us.archive.ubuntu.com trusty-backports/multiverse Sources
Ign https://download.docker.com trusty/stable Translation-en_US
Hit http://us.archive.ubuntu.com trusty-backports/main amd64 Packages
Hit http://security.ubuntu.com trusty-security/multiverse Translation-en
Ign http://extras.ubuntu.com trusty/main Translation-en_US
Hit http://us.archive.ubuntu.com trusty-backports/restricted amd64 Packages
Ign https://download.docker.com trusty/stable Translation-en
Hit http://us.archive.ubuntu.com trusty-backports/universe amd64 Packages
Hit http://security.ubuntu.com trusty-security/restricted Translation-en
Ign http://extras.ubuntu.com trusty/main Translation-en
Hit http://us.archive.ubuntu.com trusty-backports/multiverse amd64 Packages
Hit http://security.ubuntu.com trusty-security/universe Translation-en
Hit http://us.archive.ubuntu.com trusty-backports/main i386 Packages
Hit http://us.archive.ubuntu.com trusty-backports/restricted i386 Packages
Hit http://us.archive.ubuntu.com trusty-backports/universe i386 Packages
Hit http://us.archive.ubuntu.com trusty-backports/multiverse i386 Packages
Hit http://us.archive.ubuntu.com trusty-backports/main Translation-en
Hit http://us.archive.ubuntu.com trusty-backports/multiverse Translation-en
Hit http://us.archive.ubuntu.com trusty-backports/restricted Translation-en
Hit http://us.archive.ubuntu.com trusty-backports/universe Translation-en
Hit http://us.archive.ubuntu.com trusty Release
Hit http://us.archive.ubuntu.com trusty/main Sources
Hit http://us.archive.ubuntu.com trusty/restricted Sources
Hit http://us.archive.ubuntu.com trusty/universe Sources
Hit http://us.archive.ubuntu.com trusty/multiverse Sources
Hit http://us.archive.ubuntu.com trusty/main amd64 Packages
Hit http://us.archive.ubuntu.com trusty/restricted amd64 Packages
Hit http://us.archive.ubuntu.com trusty/universe amd64 Packages
Hit http://us.archive.ubuntu.com trusty/multiverse amd64 Packages
Hit http://us.archive.ubuntu.com trusty/main i386 Packages
Hit http://us.archive.ubuntu.com trusty/restricted i386 Packages
Hit http://us.archive.ubuntu.com trusty/universe i386 Packages
Hit http://us.archive.ubuntu.com trusty/multiverse i386 Packages
Hit http://us.archive.ubuntu.com trusty/main Translation-en
Hit http://us.archive.ubuntu.com trusty/multiverse Translation-en
Hit http://us.archive.ubuntu.com trusty/restricted Translation-en
Hit http://us.archive.ubuntu.com trusty/universe Translation-en
Ign http://us.archive.ubuntu.com trusty/main Translation-en_US
Ign http://us.archive.ubuntu.com trusty/multiverse Translation-en_US
Ign http://us.archive.ubuntu.com trusty/restricted Translation-en_US
Ign http://us.archive.ubuntu.com trusty/universe Translation-en_US
Reading package lists...
[+] hhvm is already installed. skipping.
Reading package lists...
Building dependency tree...
Reading state information...
The following packages were automatically installed and are no longer required:
  imagemagick-common libboost-context1.54.0 libboost-filesystem1.54.0
  libboost-program-options1.54.0 libboost-regex1.54.0 libboost-thread1.54.0
  libc-client2007e libdouble-conversion1 libfftw3-double3 libgflags2
  libgoogle-glog0 libjemalloc1 liblqr-1-0 liblz4-1 libmagickcore5
  libmagickwand5 libmcrypt4 libmemcached10 libonig2 libpq5 libsnappy1 libtbb2
  libunwind8 libyaml-0-2 mlock
Use 'apt-get autoremove' to remove them.
The following packages will be REMOVED:
  hhvm
0 upgraded, 0 newly installed, 1 to remove and 637 not upgraded.
After this operation, 0 B of additional disk space will be used.
(Reading database ... 167399 files and directories currently installed.)
Removing hhvm (3.14.5~trusty) ...
********************************************************************
* HHVM is being removed. You can remove it from your webserver with:
* 
* $ sudo /usr/share/hhvm/uninstall_fastcgi.sh
* $ sudo /etc/init.d/nginx restart
* $ sudo /etc/init.d/apache restart
********************************************************************
Processing triggers for libc-bin (2.19-0ubuntu6) ...
Selecting previously unselected package hhvm.
(Reading database ... 167339 files and directories currently installed.)
Preparing to unpack .../hhvm_3.14.5~trusty_amd64.deb ...
Unpacking hhvm (3.14.5~trusty) ...
Setting up hhvm (3.14.5~trusty) ...
update-alternatives: using /usr/bin/hhvm to provide /usr/bin/php (php) in auto mode
********************************************************************
* HHVM is installed.
*
* Running PHP web scripts with HHVM is done by having your
* webserver talk to HHVM over FastCGI. Install nginx or Apache,
* and then:
* $ sudo /usr/share/hhvm/install_fastcgi.sh
* $ sudo /etc/init.d/hhvm restart
* (if using nginx)  $ sudo /etc/init.d/nginx restart
* (if using apache) $ sudo /etc/init.d/apache restart
*
* Detailed FastCGI directions are online at:
* https://github.com/facebook/hhvm/wiki/FastCGI
*
* If you're using HHVM to run web scripts, you probably want it
* to start at boot:
* $ sudo update-rc.d hhvm defaults
*
* Running command-line scripts with HHVM requires no special setup:
* $ hhvm whatever.php
*
* You can use HHVM for /usr/bin/php even if you have php-cli
* installed:
* $ sudo /usr/bin/update-alternatives \
*    --install /usr/bin/php php /usr/bin/hhvm 60
********************************************************************
Processing triggers for ureadahead (0.100.0-16) ...
ureadahead will be reprofiled on next reboot
[+] Copying HHVM configuration
; php options

pid = /var/run/hhvm/pid

; hhvm specific

hhvm.jit = true
hhvm.enable_xhp = true
hhvm.force_hh = true
hhvm.server.type = fastcgi
hhvm.server.ip = 127.0.0.1
hhvm.server.file_socket = /var/run/hhvm/sock
hhvm.server.default_document = index.php
hhvm.server.upload.upload_max_file_size = 25M
hhvm.log.level = Error
hhvm.log.use_log_file = true
hhvm.log.file = /var/log/hhvm/error.log
hhvm.log.header = true
hhvm.log.access[default][file] = /var/log/hhvm/access.log
hhvm.log.access[default][format] = "%h %l %u %t \"%r\" %>s %b"
hhvm.server.source_root = /var/www/fbctf/
hhvm.repo.central.path = /var/run/hhvm/hhvm.hhbc
hhvm.mysql.socket = /var/run/mysqld/mysqld.sock
hhvm.pdo_mysql.socket = /var/run/mysqld/mysqld.sock
hhvm.mysqli.socket = /var/run/mysqld/mysqld.sock
[+] HHVM as PHP systemwide
[+] Enabling HHVM to start by default
 System start/stop links for /etc/init.d/hhvm already exist.
[+] Restart HHVM
 * Restarting HHVM FastCGI Daemon hhvm
   ...done.
[+] Installing composer
All settings correct for using Composer
Downloading...

Composer (version 1.4.2) successfully installed to: /var/www/fbctf/composer.phar
Use it: php composer.phar

[+] Enabling HHVM RepoAuthoritative mode
; php options

pid = /var/run/hhvm/pid

; hhvm specific

hhvm.jit = true
hhvm.enable_xhp = true
hhvm.force_hh = true
hhvm.server.type = fastcgi
hhvm.server.ip = 127.0.0.1
hhvm.server.file_socket = /var/run/hhvm/sock
hhvm.server.default_document = index.php
hhvm.server.upload.upload_max_file_size = 25M
hhvm.log.level = Error
hhvm.log.use_log_file = true
hhvm.log.file = /var/log/hhvm/error.log
hhvm.log.header = true
hhvm.log.access[default][file] = /var/log/hhvm/access.log
hhvm.log.access[default][format] = "%h %l %u %t \"%r\" %>s %b"
hhvm.server.source_root = /var/www/fbctf/
hhvm.repo.central.path = /var/cache/hhvm/hhvm.hhbc
hhvm.mysql.socket = /var/run/mysqld/mysqld.sock
hhvm.pdo_mysql.socket = /var/run/mysqld/mysqld.sock
hhvm.mysqli.socket = /var/run/mysqld/mysqld.sock
parsing inputs...
Unable to stat file /var/www/fbctf/vendor/google/apiclient-services/vendor/autoload.php
Unable to stat file /var/www/fbctf/vendor/guzzlehttp/promises/vendor/autoload.php
Unable to stat file /var/www/fbctf/vendor/phpdocumentor/reflection-docblock/vendor/autoload.php
Unable to stat file /var/www/fbctf/vendor/phpdocumentor/type-resolver/vendor/autoload.php
Unable to stat file /var/www/fbctf/vendor/phpunit/php-token-stream/tests/_fixture/test1.php
Unable to stat file /var/www/fbctf/vendor/phpunit/php-token-stream/tests/_fixture/test2.php
Unable to stat file /var/www/fbctf/vendor/phpunit/php-token-stream/tests/_fixture/test3.php
Unable to stat file /var/www/fbctf/vendor/phpunit/php-token-stream/tests/_fixture/test4.php
Unable to stat file /var/www/fbctf/vendor/phpunit/php-token-stream/vendor/autoload.php
Unable to stat file /var/www/fbctf/vendor/phpunit/phpunit-mock-objects/vendor/autoload.php
Unable to stat file /var/www/fbctf/vendor/phpunit/phpunit/build/tools/phar:/composer.phar/bin/composer
Unable to stat file /var/www/fbctf/vendor/phpunit/phpunit/vendor/autoload.php
Unable to stat file /var/www/fbctf/vendor/sebastian/comparator/vendor/autoload.php
Unable to stat file /var/www/fbctf/vendor/sebastian/resource-operations/build/arginfo.php
analyzeProgram...
analyzeProgram took 0'00" (783189 us) wall time
parsing inputs took 0'22" (22189949 us) wall time
pre-optimizing...
pre-optimizing took 0'00" (581973 us) wall time
creating binary HHBC files...
creating binary HHBC files took 0'21" (21399323 us) wall time

Success!
[+] npm is already installed. skipping.
/usr/bin/npm -> /usr/lib/node_modules/npm/bin/npm-cli.js
npm@2.15.11 /usr/lib/node_modules/npm
[+] nodejs-legacy is already installed. skipping.
/usr/bin/grunt -> /usr/lib/node_modules/grunt/bin/grunt
grunt@1.0.1 /usr/lib/node_modules/grunt
├── grunt-known-options@1.1.0
├── path-is-absolute@1.0.1
├── eventemitter2@0.4.14
├── rimraf@2.2.8
├── exit@0.1.2
├── nopt@3.0.6 (abbrev@1.1.0)
├── minimatch@3.0.4 (brace-expansion@1.1.7)
├── glob@7.0.6 (inherits@2.0.3, fs.realpath@1.0.0, inflight@1.0.6, once@1.4.0)
├── findup-sync@0.3.0 (glob@5.0.15)
├── iconv-lite@0.4.17
├── coffee-script@1.10.0
├── grunt-cli@1.2.0 (resolve@1.1.7)
├── dateformat@1.0.12 (get-stdin@4.0.1, meow@3.7.0)
├── js-yaml@3.5.5 (esprima@2.7.3, argparse@1.0.9)
├── grunt-legacy-util@1.0.0 (getobject@0.1.0, hooker@0.2.3, which@1.2.14, async@1.5.2, underscore.string@3.2.3, lodash@4.3.0)
└── grunt-legacy-log@1.0.0 (hooker@0.2.3, colors@1.1.2, underscore.string@3.2.3, lodash@3.10.1, grunt-legacy-log-utils@1.0.0)
/usr/bin/flow -> /usr/lib/node_modules/flow-bin/cli.js
flow-bin@0.47.0 /usr/lib/node_modules/flow-bin
Running "force:eslint" (force) task

Running "force-internal:pre:eslint" (force-internal) task
>> Enable force mode for task eslint.

Running "eslint:dist" (eslint) task
Warning: Failed to load plugin flowtype: Unexpected token (  Used --force, continuing.
Warning: Task "eslint:dist" failed.  Used --force, continuing.

Running "force-internal:post:eslint" (force-internal) task
>> Reset force mode for task eslint.

Running "run:flow" (run) task
src/static/js/admin.js:5
  5: var Dropkick = require('dropkickjs');
                            ^^^^^^^^^^^^ dropkickjs. Required module not found

src/static/js/admin.js:6
  6: var $ = require('jquery');
                     ^^^^^^^^ jquery. Required module not found

src/static/js/admin.js:1068
1068:         createTokens($section);
                           ^^^^^^^^ unused function argument
       v------------------------
  569: function createTokens() {
  570:   var create_data = {
  571:     action: 'create_tokens'
  ...:
  574: }
       ^ function expects no arguments

src/static/js/admin.js:1070
1070:         exportTokens($section);
                           ^^^^^^^^ unused function argument
       v------------------------
  577: function exportTokens() {
  578:   var csrf_token = $('input[name=csrf_token]')[0].value;
  579:   var action = 'export_tokens';
  ...:
  582: }
       ^ function expects no arguments

src/static/js/clock.js:3
  3: var $ = require('jquery');
                     ^^^^^^^^ jquery. Required module not found

src/static/js/fb-ctf.js:12
 12: var d3 = require('d3');
                      ^^^^ d3. Required module not found

src/static/js/fb-ctf.js:13
 13: var $ = require('jquery');
                     ^^^^^^^^ jquery. Required module not found

src/static/js/fb-ctf.js:14
 14: var Keycode = require('keycode');
                           ^^^^^^^^^ keycode. Required module not found

src/static/js/fb-ctf.js:809
809:           launchCaptureModal(country, capturedBy);
                                           ^^^^^^^^^^ unused function argument
           v-------------------------------------
  883:     function launchCaptureModal(country) {
  884:       var data = FB_CTF.data.COUNTRIES[country];
  885: 
  ...:
  1044:     } // function launchCaptureModal();
            ^ function expects no more than 1 argument

src/static/js/filter.js:3
  3: var $ = require('jquery');
                     ^^^^^^^^ jquery. Required module not found


Found 10 errors
Warning: non-zero exit code 2  Used --force, continuing.

Running "browserify:dist" (browserify) task
>> Bundle src/static/build/app-browserify.js created.

Running "copy:browserify" (copy) task
Copied 1 file

Running "sass:dist" (sass) task

Done, but with warnings.
[+] Deploying certificates
[+] nginx is already installed. skipping.
# Do not send nginx version number in error pages or server header
server_tokens off;

add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self'; frame-src 'self'; object-src 'none'";

server {
  listen 80;
  rewrite ^ https://$host$request_uri? permanent;
}

server {
  listen 443;

  ssl on;
  ssl_certificate /etc/nginx/certs/fbctf.crt;
  ssl_certificate_key /etc/nginx/certs/fbctf.key;

  ssl_prefer_server_ciphers on;
  ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA';

  ssl_dhparam /etc/nginx/certs/dhparam.pem;

  ssl_session_cache shared:SSL:10m;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_stapling on;
  ssl_stapling_verify on;
  resolver 8.8.8.8 8.8.4.4 valid=300s;
  resolver_timeout 5s;

  add_header X-Frame-Options DENY;
  add_header X-Content-Type-Options nosniff;
  add_header Strict-Transport-Security "max-age=31536000; includeSubdomains;";
  
  add_header Cache-Control "no-cache, no-store";
  add_header Pragma "no-cache";
  expires -1;

  root /var/www/fbctf/src;
  index index.php;
  location ~ \.php$ {
    try_files $uri =404;
    fastcgi_pass  unix:/var/run/hhvm/sock;
    fastcgi_index index.php;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    include fastcgi_params;
  }
  error_page 400 401 402 403 404 500 /error.php;
  client_max_body_size 25M;
}
 * Restarting nginx nginx
   ...done.
[+] Installing Unison 2.48.4
[+] Remember install the same version of unison (2.48.3) in your host machine
[+] Creating DB - fbctf
[+] Importing schema...
[+] Importing countries...
[+] Importing logos...
[+] Creating user...
[+] DB Connection file
[+] Adding default admin user
[+] The password for admin is: b73229b3662bd1326f19a98fa4dc8169
\033[0;32m [+] fbctf deployment is complete! \033[0m

[stevcoll]

Can you give us any errors from /var/log/hhvm/error.log? Most of the issues would be found there.

[yokohama1010]

@stevcoll when I check /var/log/hhvm/error.log I cannot find any errors.

[stevcoll]

What is your current version of FBCTF installed (commit head)? Also did you install from scratch recently or upgrade?

This may be a client side issue, are you getting any errors there in your browser console?

[yokohama1010]

@stevcoll I installed FBCTF from scratch following the instructions for prod deployment on June 1st, 2017. I also tried using Chrome and Firefox to no avail. Here is a screenshot of Firefox web console debugger.

[stevcoll]

There is a Javascript issue related to the login that fell through the cracks while we were making a bunch of code changes. However, it doesn't prevent a successful login. It displays client side errors when the login is incorrect, and the button doesn't appear to do anything.

Which puzzles me in this case because you did two different installs, one would have had the production password printed out at the end of your output from your first post. The dev install would have had a password that's simply "password". Just double check, make sure you're using "admin" and "password" for the dev installation.

Otherwise this doesn't make a lot of sense. I did install from the latest master (dev mode) on Ubuntu 14.04 Server, and I was able to login. The only difference seems to be that you're using Ubuntu Desktop.

*Edit: Also tested on prod install. Login worked there as well.

[justinwray]

PR #523 should fix this issue.

You can try switching to that branch and testing to see if this resolves your issue.

git clone https://github.com/WraySec/fbctf.git
cd fbctf
git checkout bug_fixes

Alternatively, you could patch the changes with the attached patch file: PR523.patch.txt (make sure you put it in the fbctf directory)

cd fbctf
patch -p0 < PR523.patch.txt

In either case (either switching to the PR branch - or - patching with the patch file), you would then follow the remainder of the desired installation directions (Development Installation Guide or Production Installation Guide). Note that you would be starting after the download step (running the provision script).