topic Re: generate_keystores.sh , does it work? in Alfresco Forum

generate_keystores.sh , does it work?

lucastancapiano — Sun, 16 Feb 2020 20:15:28 GMT

I'm triing a 6.0.2 community and I would to configure it with a new SSL certificate. I see by default a bash script is available in the alf_data/keystore directory.

Triing to launch it it works on four files:

ssl.keystore

ssl.truststore

ssl.repo.client.keystore

ssl.repo.client.truststore

The first two files are copied correctly in the keystore directory and the SSL connection through share is ok. But the alfresco solr tracking fails.

The last two files are created but ignored, so they aren't copied in the solr configuration where I suppose they should be.

If I try to copy them manually, I continue to get the same error in the alfresco solr tracking.

If I copy the first two files in the solr configuration directories and I rename them in ssl.repo.client.keystore and ssl.repo.client.truststore, the alfresco solr tracking is ok.

Surely it's a bug and I would understand if the ssl.repo.client files must be ignored or if there is an error on them creation

Re: generate_keystores.sh , does it work?

angelborroy — Mon, 17 Feb 2020 08:13:16 GMT

Hope this helps:

https://hub.alfresco.com/t5/alfresco-content-services-blog/alfresco-mtls-configuration-deep-dive/ba-p/296422

Re: generate_keystores.sh , does it work?

lucastancapiano — Mon, 17 Feb 2020 08:45:53 GMT

Yes thanks, but I think the problem is related to how the ssl.repo.client keystores were created. Certificates are imported in the same way as alfresco's key stores, so the problem would pass to these two key stores. Maybe they are corrupt?

Re: generate_keystores.sh , does it work?

angelborroy — Mon, 17 Feb 2020 09:01:18 GMT

Did you try this tool to generate your stores?

https://github.com/Alfresco/alfresco-ssl-generator