topic Re: Howto Secure Alfresco with https: access? in Alfresco Archive

Howto Secure Alfresco with https: access?

dholgado — Thu, 04 Oct 2007 09:27:12 GMT

Can someone please explain how to configure alfresco 2.1.0 so that it is accesable via web only through https://The system is running the Alfresco 2.1.0 tomcal bundle on linux with a mysql databaseThe linux distribution I have used is debian etch 4.0I would also like to know how I can configure alfr

Re: Howto Secure Alfresco with https: access?

mavo — Mon, 08 Oct 2007 18:54:18 GMT

it might be easy to do it with reverse proxing and apache.

1. set a redirect option in your conf.d files
redirect / https://..../
2. create a virtual maschine and set reverse proxy
ProxyPass /alfresco localhost:8080/alfresco
ProxyPassReverse /alfresco localhost:8080/alfresco

Re: Howto Secure Alfresco with https: access?

dholgado — Tue, 09 Oct 2007 07:33:28 GMT

Thank you very much, I will give it a try this afternoon.

Hope you have a good day
Regards

Re: Howto Secure Alfresco with https: access?

kevinr — Tue, 16 Oct 2007 13:10:39 GMT

Can someone please explain how to configure alfresco 2.1.0 so that it is accesable via web only through https://

The system is running the Alfresco 2.1.0 tomcal bundle on linux with a mysql database

The linux distribution I have used is debian etch 4.0

I would also like to know how I can configure alfresco so that the user spaces are only accesable by the user alone.

It is simple to setup TomCat to use HTTPS - see the file tomcat/conf/server.xml - look for the section
<!– Define a SSL HTTP/1.1 Connector on port 8443 –>
and enable it. Then you can access TomCat on port 8443 (or whatever you configure) to use Alfresco in HTTPS mode.

You can change the permissions on any folder space using the web-client Manage Space Users action for a space. On a user Home Space simply remove the EVERYONE user from those invited to the space - then only the owner user and admin can access it.

Thanks,

Kevin

Thanks,

Kevin

Re: Howto Secure Alfresco with https: access?

houlnx — Mon, 06 Oct 2008 23:59:54 GMT

Thanks! Worked for me. Version - labs 3 B.

Re: Howto Secure Alfresco with https: access?

bnice — Thu, 26 Feb 2009 13:02:20 GMT

Hi,

I followed your hints and activated https on Port 8443 in the tomcat configuration, but it some not to have any effekt, even after restart of alfresco and the whole server too.
Do I have to change any other file in version 3.0.0 (stable)?

Re: Howto Secure Alfresco with https: access?

bnice — Thu, 26 Feb 2009 15:51:15 GMT

Found the problem - I didn't create the keystore before…
Here's a good guide on how to enable SSL in Tomcat: http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html
You'll have to add some options like keystore-home and keystorePass in the server.xml, like:

<!– Define a SSL HTTP/1.1 Connector on port 8443
         This connector uses the JSSE configuration, when using APR, the
         connector should be using the OpenSSL style configuration
         described in the APR documentation –>
    <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
               maxThreads="150" scheme="https" secure="true" keystoreFile="${user.home}/.keystore" keystorePass="Password"
               clientAuth="false" sslProtocol="TLS" />

You'll have to pay attention on using the same password like you did when creating the keystore file.

Re: Howto Secure Alfresco with https: access?

pescha — Fri, 03 Apr 2009 03:14:03 GMT

I followed the instructions on this page and on the Apache link. For some reason when I connect to the 8443 port it wants to send me a bin file now. Any ideas? I am using Alfresco on Ubuntu and I am connecting using localhost for now.

Re: Howto Secure Alfresco with https: access?

pescha — Fri, 03 Apr 2009 06:05:07 GMT

Pay no attention to my previous post. It was a simple matter of putting "https" before localhost:8443

I am having problems getting Share to work with SSL however. The regular /alfresco works like a charm. I am getting authentication errors in Share.

Re: Howto Secure Alfresco with https: access?

lunchbox — Fri, 18 Sep 2009 13:37:47 GMT

Hi All

I am having problems getting Share to work with SSL however. The regular /alfresco works like a charm. I am getting authentication errors in Share.

Is there a fix for using share with https? I've just set up 3.2 with https and share still fails

many thanks,
Niels

Re: Howto Secure Alfresco with https: access?

bnice — Mon, 21 Sep 2009 14:59:31 GMT

Hi,

I'm currently using Labs3 final.
Everything's running fine with SSL: Alfresco, Share and DoCASU.
Did you create the certificate for tomcat:

/usr/java/jdk1.6.0_12/bin/keytool -genkey -alias tomcat -keyalg RSA‍

This will ask you for a keystore-password and further details.

Additionaly, you have to remove the comment signs "<!– … —>" for the SSL connector (I think you have already done this, if Alfresco works with SSL):


<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
               maxThreads="150" scheme="https" secure="true" keystoreFile="${user.home}/.keystore" keystorePass="xxx"
               clientAuth="false" sslProtocol="TLS" />
‍‍‍‍‍

You can find more info on configuring SSL with tomcat here:
http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html

Re: Howto Secure Alfresco with https: access?

dangruhn — Tue, 09 Mar 2010 14:02:30 GMT

I am using 3.2r2 community and have created the keystore and uncommented the https section and port 8443 works fine for explorer and share as long as I don't comment out port 8080. This means that people can access my server without SSL if they just use port 8080.

I can set up my firewall so that people cannot access 8080 but is there a way to drop port 8080 entirely so that even my internal folks need to use SSL?

When I comment out 8080, I get the following:

type Exception report

message

description The server encountered an internal error () that prevented it from fulfilling this request.

exception

javax.servlet.ServletException: org.alfresco.error.AlfrescoRuntimeException: 02090001 Unable to retrieve object: site-index of type: page
   org.alfresco.web.site.servlet.DispatcherServlet.service(DispatcherServlet.java:146)
   javax.servlet.http.HttpServlet.service(HttpServlet.java:717)

root cause

org.alfresco.error.AlfrescoRuntimeException: 02090001 Unable to retrieve object: site-index of type: page
   org.alfresco.web.framework.ModelObjectManager.getObject(ModelObjectManager.java:140)
   org.alfresco.web.site.Model.getObject(Model.java:513)
   org.alfresco.web.site.Model.getPage(Model.java:165)
   org.alfresco.web.site.SlingshotPageMapper.executeMapper(SlingshotPageMapper.java:188)
   org.alfresco.web.site.AbstractPageMapper.execute(AbstractPageMapper.java:62)
   org.alfresco.web.site.DefaultRequestContextFactory.newInstance(DefaultRequestContextFactory.java:109)
   org.alfresco.web.site.FrameworkHelper.initRequestContext(FrameworkHelper.java:202)
   org.alfresco.web.site.servlet.DispatcherServlet.service(DispatcherServlet.java:142)
   javax.servlet.http.HttpServlet.service(HttpServlet.java:717)

root cause

org.alfresco.web.framework.exception.ModelObjectPersisterException: Error loading object id: site-index from persister id: RemoteStore_alfresco/site-data/pages_page
   org.alfresco.web.framework.MultiModelObjectPersister.getObject(MultiModelObjectPersister.java:110)
   org.alfresco.web.framework.ModelObjectManager.getObject(ModelObjectManager.java:136)
   org.alfresco.web.site.Model.getObject(Model.java:513)
   org.alfresco.web.site.Model.getPage(Model.java:165)
   org.alfresco.web.site.SlingshotPageMapper.executeMapper(SlingshotPageMapper.java:188)
   org.alfresco.web.site.AbstractPageMapper.execute(AbstractPageMapper.java:62)
   org.alfresco.web.site.DefaultRequestContextFactory.newInstance(DefaultRequestContextFactory.java:109)
   org.alfresco.web.site.FrameworkHelper.initRequestContext(FrameworkHelper.java:202)
   org.alfresco.web.site.servlet.DispatcherServlet.service(DispatcherServlet.java:142)
   javax.servlet.http.HttpServlet.service(HttpServlet.java:717)

root cause

org.alfresco.web.framework.exception.ModelObjectPersisterException: Failure to load model object for path: site-index.xml
   org.alfresco.web.framework.StoreModelObjectPersister.getObjectByPath(StoreModelObjectPersister.java:170)
   org.alfresco.web.framework.StoreModelObjectPersister.getObject(StoreModelObjectPersister.java:108)
   org.alfresco.web.framework.MultiModelObjectPersister.getObject(MultiModelObjectPersister.java:106)
   org.alfresco.web.framework.ModelObjectManager.getObject(ModelObjectManager.java:136)
   org.alfresco.web.site.Model.getObject(Model.java:513)
   org.alfresco.web.site.Model.getPage(Model.java:165)
   org.alfresco.web.site.SlingshotPageMapper.executeMapper(SlingshotPageMapper.java:188)
   org.alfresco.web.site.AbstractPageMapper.execute(AbstractPageMapper.java:62)
   org.alfresco.web.site.DefaultRequestContextFactory.newInstance(DefaultRequestContextFactory.java:109)
   org.alfresco.web.site.FrameworkHelper.initRequestContext(FrameworkHelper.java:202)
   org.alfresco.web.site.servlet.DispatcherServlet.service(DispatcherServlet.java:142)
   javax.servlet.http.HttpServlet.service(HttpServlet.java:717)

root cause

java.io.IOException: Unable to test document path: site-index.xml in remote store: alfresco due to error: 498 Connection refused
   org.alfresco.web.scripts.RemoteStore.hasDocument(RemoteStore.java:351)
   org.alfresco.web.framework.StoreModelObjectPersister.getObjectByPath(StoreModelObjectPersister.java:136)
   org.alfresco.web.framework.StoreModelObjectPersister.getObject(StoreModelObjectPersister.java:108)
   org.alfresco.web.framework.MultiModelObjectPersister.getObject(MultiModelObjectPersister.java:106)
   org.alfresco.web.framework.ModelObjectManager.getObject(ModelObjectManager.java:136)
   org.alfresco.web.site.Model.getObject(Model.java:513)
   org.alfresco.web.site.Model.getPage(Model.java:165)
   org.alfresco.web.site.SlingshotPageMapper.executeMapper(SlingshotPageMapper.java:188)
   org.alfresco.web.site.AbstractPageMapper.execute(AbstractPageMapper.java:62)
   org.alfresco.web.site.DefaultRequestContextFactory.newInstance(DefaultRequestContextFactory.java:109)
   org.alfresco.web.site.FrameworkHelper.initRequestContext(FrameworkHelper.java:202)
   org.alfresco.web.site.servlet.DispatcherServlet.service(DispatcherServlet.java:142)
   javax.servlet.http.HttpServlet.service(HttpServlet.java:717)

note The full stack trace of the root cause is available in the Apache Tomcat/6.0.18 logs.‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I can see that redirection from https is going to http:8080 but how to fix this?

Centos 5.4
Alfresco 3.2r2
MySQL 5.1

Re: Howto Secure Alfresco with https: access?

icpeanuts — Thu, 06 May 2010 06:48:03 GMT

Thanks for the info, I was able to get https to work using the above info.

I am having a problem where anytime when I upload something, ie a photo to the user profile, it will say Upload Failure. This happens when I upload a document to the Document Library. This is only happening if I use https.

If I use http, everything works fine. Can someone give me some pointer to get this resolve. I am able to login and access Alfresco versio 3.3 via https. The error only occurs when I try to uplaod something, it will say Upload Failure.

Thanks in advance

Re: Howto Secure Alfresco with https: access?

mikeh — Thu, 06 May 2010 07:09:00 GMT

Please see: https://issues.alfresco.com/jira/browse/ALF-1324

Thanks,
Mike

Re: Howto Secure Alfresco with https: access?

icpeanuts — Thu, 06 May 2010 15:40:53 GMT

I tried the following, it is not working for me.
Resolution: When using internet explorer add the cert to "Trusted Root Certification Authorities", upload now works in Firefox.

I exported the personal SSL, import to the "Trusted Root Certification Authorities", it shows up on the list, but when I tried to access https:, Internet Explorer still said
There is a problem with this website's security certificate.
The security certificate presented by this website was not issued by a trusted certificate authority.
The security certificate presented by this website was issued for a different website's address.

I continue to get security warnings in Internet Explorer, but I was able to upload files via "Internet Explorer" ,but I can not using Mozilla Firefox.

What am I not doing? Thanks.

Re: Howto Secure Alfresco with https: access?

mikeh — Thu, 06 May 2010 16:01:02 GMT

What am I not doing? Thanks.

No idea, sorry. The fix was supplied by a Community member. As far as Alfresco are concerned, unfortunately there's very little we can do about it until either (i) Adobe decide to fix the problem or (ii) native multi-file upload in browsers becomes more viable to support.

Thanks,
Mike

Re: Howto Secure Alfresco with https: access?

icpeanuts — Thu, 06 May 2010 16:43:15 GMT

Thanks, when will Native file upload be integrated into Alfresco?

Re: Howto Secure Alfresco with https: access?

mikeh — Thu, 06 May 2010 17:11:47 GMT

Thanks, when will Native file upload be integrated into Alfresco?

When we're certain browser vendors have settled on a standard and we can find time to investigate and implement. Of course, if somebody else would like to contribute it, it will get in much quicker! :wink:

Thanks,
Mike

Re: Howto Secure Alfresco with https: access?

anidem — Tue, 28 Dec 2010 08:20:45 GMT

Dear Alfresco User,

Good Day, I am new to alfresco and tomcat. I have seen your post that you have successfully configured alfresco on a secured connection https. In which i have not been to successful on doing the configuration. I was hopping you can share me the configuration or detailed steps on how you did the configuration.

I am currently using Alfresco Share Community 3.4b on a Windows 7 Home Premium computer.

1. I have created a .keystore
2. I have edit the server.xml:
<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true" keystoreFile="conf/.keystore" keystorePass="changeit"
clientAuth="false" sslProtocol="TLS" />

but when i try to load https://localhost:8443/
nothing happens

I hope you can help me out. Please give a detailed instructions.
Thank you very much…

Re: Howto Secure Alfresco with https: access?

coene — Tue, 04 Jan 2011 13:25:54 GMT

Hi,

I have the same problem, I found this issue addressed earlier and I read about all the probable solutions but still no succes.
I tried this activating https/8443 on another server (with tomcat 5.0 and another application) and with succes, no problem there.

But on my Alfresco-server it won't work. (Alfresco Community 3.4b on Windows 2003sp2)
I tried different things like placing the keystorefile in different places, changing the format of the-path-to, tried 443 etc… no luck. I can see (tcpViewer) that there is a connection established on port 8443 but that's all, no certificate seems to be delivered to the client-browser.

Any suggestions?

—————————————-

!!!!!!    Update: I re-evaluated my server.xml file and changed two lines to avoid auto-configuration of the SSL-implementation:

-1.   protocol="org.apache.coyote.http11.Http11Protocol" instead of the default line: protocol="HTTP/1.1"
-2.   <Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="off" /> instead of value "on" which is default

That did the trick.