topic Re: Alfresco 5.0a community & certificate in Alfresco Archive

Alfresco 5.0a community & certificate

gerbenkwakkel — Thu, 30 Oct 2014 09:42:18 GMT

In my environment running an Alfresco Community 5.0a on Ubuntu 12.04 LTS. Now I have a certificate from GeoTrust added in my own keystore and added in server.xml: <Connector port="8443" URIEncoding="UTF-8" protocol="org.apache.coyote.http11.Http11Protocol" SSLEnabled="true" maxThrea

Re: Alfresco 5.0a community & certificate

angelborroy — Fri, 31 Oct 2014 05:39:00 GMT

Look at alf_data/solr folder. There is a file with some instructions about configuring a new certificate. The problem, basically is that SOLR is targetting 8443 port and using client authentication. As you have changed the issuer CA, SOLR can't be authenticated any more.

Re: Alfresco 5.0a community & certificate

gerbenkwakkel — Fri, 31 Oct 2014 14:22:45 GMT

Is this step also possible with a existing certificate + keystore?

Re: Alfresco 5.0a community & certificate

angelborroy — Sat, 01 Nov 2014 09:11:36 GMT

It's possible, but you must change SOLR client certificate.

Re: Alfresco 5.0a community & certificate

gerbenkwakkel — Mon, 03 Nov 2014 08:49:46 GMT

So, can i replace the SOLR client certificate with the GeoTrust certificates or should it be in a different way?

Re: Alfresco 5.0a community & certificate

angelborroy — Tue, 04 Nov 2014 10:31:49 GMT

You should read information on README.txt file provided by alfresco in alf_data/solr

There different ways: include a certificate from GeoTrust, change SSL protocolo negotiation…