topic Re: Alfresco + SSL <security-constraint> broken in Alfresco Archive

Alfresco + SSL broken

dannyboy — Fri, 21 Aug 2009 21:05:08 GMT

If I would like my entire webapp directory to be SSL protected, I would throw this in at the bottom of web.xml<security-constraint><web-resource-collection><web-resource-name>securedapp</web-resource-name><url-pattern>/*</url-pattern></web-resource-collection&g

Re: Alfresco + SSL broken

dannyboy — Fri, 21 Aug 2009 21:32:33 GMT

Please let me know if I am not clear. I am not an expert 😕

I now realized that enabling SSL on the entire directory means that I won't be able to upload or download documents. This makes sense I guess.

What url should I put in


<url-pattern>/*</url-pattern>
‍‍‍

so that all logins are done through SSL but main page isn't?

Re: Alfresco + SSL broken

hughesjr — Thu, 24 Sep 2009 18:47:46 GMT

Anyone have an answer for this question … I would like to have the logins via https as well.

Re: Alfresco + SSL broken

benswitzer — Fri, 25 Sep 2009 16:04:27 GMT

My recommendation would be to use a web server (Apache, IIS, etc) in front of Alfresco to handle the initial requests. Setting up a web server to handle the SSL requests is much more straight forward. Then use mod_jk to have those requests passed to Tomcat which is running Alfresco.

I've used both IIS (6 & 7) as well as Apache (2) in the past with good results.

Ben

Re: Alfresco + SSL broken

dannyboy — Wed, 18 Nov 2009 20:08:14 GMT

Bumping this.

Still a problem. When I have CONFIDENTIAL added to web.xml, the login information doesn't authenticate.