topic Re: Alfresco, OpenCMIS, and SSL in Alfresco Archive

Alfresco, OpenCMIS, and SSL

ryanbobko — Mon, 11 Nov 2013 19:10:48 GMT

Hi All,I'm trying to move my current Alfresco installation to use SSL. The tomcat changes were slight, and I can successfully log into Alfresco via my web browser over HTTPS. However, my OpenCMIS-based application fails to connect regardless of what I do. I've tried using the OpenCMIS workbench to v

Re: Alfresco, OpenCMIS, and SSL

parzgnat — Tue, 12 Nov 2013 04:44:14 GMT

When you say you've "added [your] server to every keystore", does that mean that you've imported the certificate from the Alfresco repository into the trust store of the JVM that's running your OpenCMIS client (or CMIS Workbench)? I believe that this is what you need to do.

Re: Alfresco, OpenCMIS, and SSL

ryanbobko — Fri, 15 Nov 2013 20:58:36 GMT

Yes. I used a tool called InstallCert to get the cert from Alfresco into my local truststore. For good measure, I've also imported all the keys from the truststores (and heck, keystores) in the alf_data/keystore directory.

Re: Alfresco, OpenCMIS, and SSL

ryanbobko — Tue, 19 Nov 2013 19:13:14 GMT

To update folks that might come along later, I've partially solved this problem by regenerating the alfresco keys in alf_data/keystore using the generate_keystores.sh script. I changed the REPO_CERT_DNAME variable to CN=localhost … and restarted Alfresco. I then installed the cert in my keystore. Now workbench works against the HTTPS instance. My app inexplicably doesn't, but at least the goalposts are getting nearer.

Re: Alfresco, OpenCMIS, and SSL

ryanbobko — Tue, 19 Nov 2013 19:45:18 GMT

I have solved this problem. My webapp used OpenCMIS to connect to Alfresco over https. My webapp was running with a different JVM than was the workbench stand-alone tool, so once I imported the server's key into both JVMs, both tools worked as expected.