Is it possible to share HTTP and HTTPS ports at the same time?

iisti — Thu, 27 Jun 2019 08:59:03 GMT

I've been trying to check is it possible to set both HTTP and HTTPS running at the same time, something like with URLs below.http://alfresco.domain.comhttps://alfresco.domain.comMy co-worker is developing a client for Alfresco and he would need to test that the client is working with both HTTP and H

Re: Is it possible to share HTTP and HTTPS ports at the same time?

iisti — Wed, 03 Jul 2019 12:14:49 GMT

I'm still not sure if it's possible to share both protocols at the same time, but I can access with both HTTP and HTTPS Alfresco 5.2 running on Ubuntu 16.04 with these steps.

sudo a2enmod rewrite
sudo apt-get install libapache2-mod-jk
sudo a2enmod proxy
sudo a2enmod proxy_http
sudo /opt/alfresco-community/alfresco.sh stop

# Uncomment line below from server.xml

sudo vim /opt/alfresco-community/tomcat/conf/server.xml

<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" URIEncoding="UTF-8" />

# Check worker properties. These settings were automatically generated, nothing needed to be changed.

sudo vim /etc/libapache2-mod-jk/workers.properties

worker.list=ajp13_worker
worker.ajp13_worker.port=8009
worker.ajp13_worker.host=localhost
worker.ajp13_worker.type=ajp13
worker.ajp13_worker.lbfactor=1

# Apache configuration
# If you don't have SSL certs you need to comment the SSL part out. You can generate SSL certs with certbot.
# https://certbot.eff.org/lets-encrypt/ubuntuxenial-apache

/etc/apache2$ cat sites-enabled/alfresco-https.example-domain.com.conf

<VirtualHost *:80>
 ServerAdmin it@example-domain.com
 ServerName alfresco-https.example-domain.com

 ErrorLog ${APACHE_LOG_DIR}/error.log
 CustomLog ${APACHE_LOG_DIR}/access.log combined

 ProxyPreserveHost On

 # Making sure that pgadmin4 is excluded from proxy
 ProxyPass /pgadmin4 !
 ProxyPassReverse /pgadmin4 !

 ProxyPass / http://localhost:8080/
 ProxyPassReverse / http://localhost:8080/

 # Disable footer line (more security, by not giving apache version)
 # Source: https://www.tecmint.com/hide-apache-web-server-version-information/
 ServerSignature Off 
</VirtualHost>

<VirtualHost *:443>
 ServerName alfresco-https.example-domain.com
 
 ErrorLog ${APACHE_LOG_DIR}/https-error.log
 CustomLog ${APACHE_LOG_DIR}/https-access.log combined
 
 SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
 # JkOptions indicate to send SSL KEY SIZE,
 JkOptions +ForwardKeySize -ForwardDirectories
 
 # Using ajp13_worker as that's default setting in /etc/libapache2-mod-jk/workers.properties
 # Setting is created automatically when installnig libapache2-mod-jk
 # sudo apt-get install libapache2-mod-jk
 JkMount /share ajp13_worker
 JkMount /share/* ajp13_worker
 JkMount /alfresco/webdav ajp13_worker
 JkMount /alfresco/webdav/* ajp13_worker
 JkMount / ajp13_worker
 JkMount /_vti_inf.html ajp13_worker
 JkMount /_vti_bin/* ajp13_worker
 JkMount /alfresco ajp13_worker
 JkMount /alfresco/ ajp13_worker
 JkMount /alfresco/aos ajp13_worker
 JkMount /alfresco/aos/* ajp13_worker
 JkMount /alfresco/images/* ajp13_worker 
 JkMount /alfresco/css/* ajp13_worker
 # Un-comment these lines for public API access
 JkMount /alfresco/api/*/cmis/versions/* ajp13_worker 
 JkMount /alfresco/api/*/public/cmis/versions/* ajp13_worker
 JkMount /alfresco/api/*/public/alfresco/versions/* ajp13_worker
 JkMount /alfresco/service/api/server ajp13_worker 
 JkMount /alfresco/cmisatom/* ajp13_worker 
 JkMount /alfresco/service/cmis/* ajp13_worker
 JkMount /alfresco/api/cmis/versions/* ajp13_worker
 # Un-comment these lines for Desktop Sync
 # JkMount /alfresco/api/*/private/alfresco/versions/* ajp13_worker
 
 SSLCertificateFile /etc/letsencrypt/live/alfresco-https.example-domain.com/fullchain.pem
 SSLCertificateKeyFile /etc/letsencrypt/live/alfresco-https.example-domain.com/privkey.pem
 Include /etc/letsencrypt/options-ssl-apache.conf

 # Disable footer line (more security, by not giving apache version)
 # Source: https://www.tecmint.com/hide-apache-web-server-version-information/
 ServerSignature Off 
</VirtualHost>
# vim: syntax=apache ts=4 sw=4 sts=4 sr noet

# Check Apache configuration and restart it
sudo apachectl configtest

sudo apachectl restart

# Start Alfresco
sudo /opt/alfresco-community/alfresco.sh start

# Check Alfresco starting logs to know when the server has really started.
less +F /opt/alfresco-community/tomcat/logs/catalina.out

# URLs below should work after Alfresco has been started.

http://alfresco-https.example-domain.com
http://alfresco-https.example-domain.com:8080
https://alfresco-https.example-domain.com

I didn't change anything in alfresco-global.properties, but I haven't installed the server originally, so I'm not sure if something has been configured in there. Here's the whole file.

alfresco-https:/opt/alfresco-community/tomcat/shared/classes$ sudo less alfresco-global.properties

###############################
## Common Alfresco Properties #
###############################

dir.root=/opt/alfresco-community/alf_data

alfresco.context=alfresco
alfresco.host=127.0.0.1
alfresco.port=8080
alfresco.protocol=http

share.context=share
share.host=127.0.0.1
share.port=8080
share.protocol=http

### database connection properties ###
db.driver=org.postgresql.Driver
db.username=alfresco
db.password=admin
db.name=alfresco
db.url=jdbc:postgresql://localhost:5432/${db.name}
# Note: your database must also be able to accept at least this many connections. Please see your database documentation for instructions on how to configure this.
db.pool.max=275
db.pool.validate.query=SELECT 1

# The server mode. Set value here
# UNKNOWN | TEST | BACKUP | PRODUCTION
system.serverMode=UNKNOWN

### FTP Server Configuration ###
ftp.port=21

### RMI registry port for JMX ###
alfresco.rmi.services.port=50500

### External executable locations ###
ooo.exe=/opt/alfresco-community/libreoffice/program/soffice.bin
ooo.enabled=true
ooo.port=8100
img.root=/opt/alfresco-community/common
img.dyn=${img.root}/lib
img.exe=${img.root}/bin/convert
alfresco-pdf-renderer.root=/opt/alfresco-community/common/alfresco-pdf-renderer
alfresco-pdf-renderer.exe=${alfresco-pdf-renderer.root}/alfresco-pdf-renderer

jodconverter.enabled=false
jodconverter.officeHome=/opt/alfresco-community/libreoffice
jodconverter.portNumbers=8100

### Initial admin password ###
alfresco_user_store.adminpassword=209c6174da490caeb422f3fa5a7ae634

### E-mail site invitation setting ###
notification.email.siteinvite=false

### License location ###
dir.license.external=/opt/alfresco-community

### Solr indexing ###
index.subsystem.name=solr4
dir.keystore=${dir.root}/keystore
solr.host=localhost
solr.port.ssl=8443
alfresco-global.properties

topic Is it possible to share HTTP and HTTPS ports at the same time? in Alfresco Forum

Is it possible to share HTTP and HTTPS ports at the same time?

Re: Is it possible to share HTTP and HTTPS ports at the same time?