Alfresco 5,0 -> 201605: Sorl4 SSL 403 Errors

mxc — Sat, 20 Aug 2016 20:55:52 GMT

Hi all,We have upgraded from Alfresco 5.0 community edition to Alfresco201605. Everything, except secure communication with Solr4, is working. There appears to be a problem with X509 filter in solr4. The browsers and clients do not appear to send the client certs as far as we can tell.I have done th

Re: Alfresco 5,0 -> 201605: Sorl4 SSL 403 Errors

mxc — Sun, 21 Aug 2016 10:49:00 GMT

Found the problem. It seems the syntax for the coyote connector in server.xml has changed. Needed to add 'allowUnsafeLegacyRenegotiation="true"' to the declaration so the full connector stanza looks like this:
<blockcode>
   <Connector port="8443" URIEncoding="UTF-8" protocol="org.apache.coyote.http11.Http11Protocol" SSLEnabled="true"
               maxThreads="150" scheme="https" keystoreFile="/usr/local/alfresco/alf_data/keystore/ssl.keystore" keystorePass="kT9X6oe68t" keystoreType="JCEKS"
secure="true" connectionTimeout="240000" truststoreFile="/usr/lcoal/alfresco/alf_data/keystore/ssl.truststore" truststorePass="kT9X6oe68t" truststoreType="JCEKS"
               clientAuth="want" sslProtocol="TLS" allowUnsafeLegacyRenegotiation="true" maxHttpHeaderSize="32768" maxSavePostSize="-1" />
</blockcode>

topic Alfresco 5,0 -> 201605: Sorl4 SSL 403 Errors in Alfresco Archive

Alfresco 5,0 -> 201605: Sorl4 SSL 403 Errors

Re: Alfresco 5,0 -> 201605: Sorl4 SSL 403 Errors