Jetpack: NetworkError/’Failed to fetch’ on subdomains in multisite

Figuring that it might be possible to move all Jetpack admin to the network, I googled ‘Jetpack multisite network activate’ and came across this page which says that if Jetpack is network activated, the JP admin of the ‘primary site’ becomes the admin for the whole network – at least as far as Jetpack’s Protect feature goes.

Disabling subsite overrides and testing with the Tiled Galleries feature seems to confirm that this does not extend to other parts of Jetpack. The feature appears on the primary site but not on the subdomain sites.

Thanks for responding.

I get 404s on all sites:

{“code”:”rest_no_route”,”message”:”No route was found matching the URL and request method”,”data”:{“status”:404}}

This applies to both main site and subsite, e.g.

• https://games.brokkr.net/wp-json
• https://brokkr.net/wp-json

I have tried searching for explanations relating to wp-json (I’m assuming here that Jetpack makes use of it somehow now) but have not come upon anything. Some people do mention webser/proxy configuration so it might bear on the matter that I use nginx. I can’t see anything differentiating the sub and main site in the configuration of the server.

However, there are differences in what appears in the access logs. This is me enabling Tiled galleries on the main site:

86.52.239.162 - - [12/Jan/2017:21:15:44 +0100] "GET /wp-json/jetpack/v4/site HTTP/1.1" 400 122 "https://brokkr.net/wp-admin/admin.php?page=jetpack" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:50.0) Gecko/20100101 Firefox/50.0"
192.0.101.132 - - [12/Jan/2017:21:15:46 +0100] "POST /xmlrpc.php?for=jetpack&token=U1bXlkHoiE2WgU%29Sx%4016014Gga%26B%5E0RP%3A1%3A0&timestamp=1484252135&nonce=kitAskjXaU&body-hash=BlirtvkZK6gLGJW6I0aTLi%2FbAbE%3D&signature=uT5hiLqsid5ONdHSuBZZWHKoLoQ%3D HTTP/1.1" 200 669 "https://brokkr.net/xmlrpc.php?for=jetpack&token=U1bXlkHoiE2WgU%29Sx%4016014Gga%26B%5E0RP%3A1%3A0&timestamp=1484252135&nonce=kitAskjXaU&body-hash=BlirtvkZK6gLGJW6I0aTLi%2FbAbE%3D&signature=uT5hiLqsid5ONdHSuBZZWHKoLoQ%3D" "Jetpack by WordPress.com"
86.52.239.162 - - [12/Jan/2017:21:16:04 +0100] "POST /wp-cron.php?doing_wp_cron=1484252163.8947679996490478515625 HTTP/1.1" 499 0 "https://brokkr.net/wp-cron.php?doing_wp_cron=1484252163.8947679996490478515625" "WordPress/4.7.1; https://brokkr.net"
86.52.239.162 - - [12/Jan/2017:21:16:05 +0100] "POST /wp-json/jetpack/v4/module/tiled-gallery/active HTTP/1.1" 200 87 "https://brokkr.net/wp-admin/admin.php?page=jetpack" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:50.0) Gecko/20100101 Firefox/50.0"

Clicking the same slider button on the but site produces nothing in the access log.

Thanks for the suggestion. I feel stupid for not thinking of disabling plugins first.

Sadly, either that’s not it or somehow the cache is still on despite the plugin being gone. The page source files certainly no longer mention Comet Cache.

Here’s what I did:

I am not a (Comet Cache) Pro user so I never had that option to enable. CC Changelog says it’s exclusive to Pro, not ‘lite’. Also not an Apache but an Nginx user so don’t know what impact that would have had, even if.

In any case if the problem was related to CC, I figured that disabling the plugin should do the trick. It didn’t. Then I reenabled it, wiped the cache, disabled it. Still no go on either /wp-json or Jetpack features. So I deleted the plugin. Nope.

I disabled all plugins network-wide except Jetpack. Still no difference. Restarted nginx just for good measure. Nah. Switched theme to vanilla twenty sixteen in case there was anything in functions.php in the way. No. Still won’t let enable/disable anything.

I’m out of ideas :/

• This reply was modified 7 years, 3 months ago by brokkr.

Got it. The connections are being blocked by the browser because of mixed content!

If I disable Firefox blocking mixed content I’m allowed access but nginx is set to redirect http to https with a 301 so I still get nothing, understandably.

Now, the question is still why this happens on one set of sites but not on the other. The certificates in question are obviously set in the name of the main domain but apply equally to the subdomains (named, not wildcard).

Here’s the certificate as represented by digicert’s cert checker:

Common Name = brokkr.net
Subject Alternative Names = brokkr.net, games.brokkr.net, sky.brokkr.net
Issuer = Let's Encrypt Authority X3
Serial Number = 0335C4899ED2AC8383E4DDDAF3BF797682EE
SHA1 Thumbprint = AFA557F0E01A01498CF66AA9F96B08CFFE6E48F6
Key Length = 2048
Signature algorithm = SHA256 + RSA (excellent)
Secure Renegotiation: Supported