topic Re: Default generated SSL Certificate contains 'invalid address' in Alfresco Archive

Default generated SSL Certificate contains 'invalid address'

shmuel_levine — Thu, 01 May 2014 16:37:53 GMT

Hi,I've tried to put together a working installation of Alfresco based on the documentation and it appears to be working now, more or less.The issue which I have encountered is related to the self-generated SSL certificates which were automatically set up by the installation script. I understand th

Re: Default generated SSL Certificate contains 'invalid address'

afaust — Fri, 02 May 2014 08:05:28 GMT

Hello,

if you want to have a valid SSL certificate for your specific DNS / host name, you absolutely have to regenerate the certificates specific to your environment. The default certificates are basically just for evaluation installations and not meant to be used in production. Anyone of your users could just get the Repository certificate from the Alfresco downloads, access your SOLR server and thus be able to research a large part of your content without content permissions stopping them in any way.

Regards
Axel

Re: Default generated SSL Certificate contains 'invalid address'

shmuel_levine — Fri, 02 May 2014 13:20:44 GMT

Axel,
Thanks for your response.

I found a script to generate new keystores and in there, I replaced the installation folder and also changed the CN to match my FQDN. There was a slight unexpected change to the CA certificate as a result, but insignificant.

In any case, that seems to have done the trick. I am now able to connect both with 3rd-party webdav clients as well as with the Windows7 built-in client.

Thanks for your help.

Shmuel