Alfresco integration with Fortigate reverse proxy

jefry_kur — Tue, 04 Oct 2016 08:15:13 GMT

Hi Experts,I am new about Alfresco, and I want to using reverse proxy in my system. The reason why I want to do this because there is a need to use HTTPS protocol and release my system to the internet. My question is, which file should I modify to enable this feature? So far, I have read many docume

Re: Alfresco integration with Fortigate reverse proxy

angelborroy — Tue, 04 Oct 2016 11:56:12 GMT

Have you tried including your external SSL ports? Change "alfresco.port" and "share.port" to 443.

Re: Alfresco integration with Fortigate reverse proxy

jefry_kur — Wed, 05 Oct 2016 02:46:53 GMT

Hi Angel,

I have tried to do that, and I still cannot open the page. If there any file that I should modified to use reverse proxy? I tried to change share-config-custom.xml by adding below lines:

<!--

Will be used and exposed to the client side code in Alfresco.contants.CSRF_POLICY.

Use the Alfresco.util.CSRFPolicy.getHeader() or Alfresco.util.CSRFPolicy.getParameter() with Alfresco.util.CSRFPolicy.getToken()

to set the token in custom 3rd party code.

-->

<cookie>Alfresco-CSRFToken</cookie>

<header>Alfresco-CSRFToken</header>

<parameter>Alfresco-CSRFToken</parameter>

</client>

<!--

Certain Surf POST requests form the WebScript console must be allowed to pass without a token since

the Surf WebScript console code can't be dependent on a Share specific filter.

-->

<rule>

</request>

<param name="always">false</param>

<param name="referer">https://103.229.12.52/.*</param>

</action>

<param name="always">false</param>

<param name="origin">https://103.229.12.52</param>

</action>

</rule>

<rule>

<path>^/page/dologin.*|^\/page/site\/[^\/]+\/start-workflow|^\/page/start-workflow</path>

</request>

<param name="always">false</param>

<param name="referer">https://103.229.12.52/.*</param>

</action>

<param name="always">false</param>

<param name="origin">https://103.229.12.52</param>

</action>

</rule>

<rule>

<path>^/page/dologout.*</path>

</request>

<param name="session">Alfresco-CSRFToken</param>

<param name="cookie">Alfresco-CSRFToken</param>

</action>

</rule>

<rule>

</session>

</request>

<param name="session">Alfresco-CSRFToken</param>

<param name="cookie">Alfresco-CSRFToken</param>

</action>

</rule>

<rule>

</session>

</request>

<param name="session">Alfresco-CSRFToken</param>

<param name="cookie">Alfresco-CSRFToken</param>

</action>

</rule>

<rule>

<header name="Content-Type">^multipart/.*</header>

</session>

</request>

<param name="session">Alfresco-CSRFToken</param>

<param name="parameter">Alfresco-CSRFToken</param>

</action>

<param name="always">false</param>

<param name="referer">https://103.229.12.52/.*</param>

</action>

<param name="always">false</param>

<param name="origin">https://103.229.12.52</param>

</action>

</rule>

<!--

Verify there is a token in the header for remaining state changing requests and also correct

referer & origin headers if available. We "catch" all content types since just setting it to

"application/json.*" since a webscript that doesn't require a json request body otherwise would be

successfully executed using i.e. "text/plain".

-->

<rule>

<method>POST|PUT|DELETE</method>

</session>

</request>

<param name="session">Alfresco-CSRFToken</param>

<param name="header">Alfresco-CSRFToken</param>

</action>

<param name="always">false</param>

<param name="referer">https://103.229.12.52/.*</param>

</action>

<param name="always">false</param>

<param name="origin">https://103.229.12.52</param>

</action>

</rule>

</filter>

</config>

Thanks and regards,

Jefry

Re: Alfresco integration with Fortigate reverse proxy

angelborroy — Wed, 05 Oct 2016 07:49:30 GMT

Maybe this can help you BeeCon 2016 >> Talks

No modification is required in "share-config-custom.xml".

topic Re: Alfresco integration with Fortigate reverse proxy in Alfresco Archive

Alfresco integration with Fortigate reverse proxy

Re: Alfresco integration with Fortigate reverse proxy

Re: Alfresco integration with Fortigate reverse proxy

Re: Alfresco integration with Fortigate reverse proxy