topic Re: Alfresco behind pfsense NAT not secure even with valid certificate in Alfresco Forum

Alfresco behind pfsense NAT not secure even with valid certificate

mmerlone — Fri, 27 Mar 2020 20:05:31 GMT

Hi,

Not sure if this is alfresco related but maybe someone could give me some insight.

I have an alfresco instance (https://alfresco.a1.ind.br) running from a port-forward rule on my pfsense firewall. I have the same configuration for our site (https://a1.ind.br) and it works fine.

Some users are complaining about invalid certificate and thus no closed padlock icon. When I check from Chrome it says this site is not secure, but the certificate is a valid LetsEncrypt . Checking on https://www.digicert.com/help/ all seems fine.

What could be wrong?

Thanks for any help!

Re: Alfresco behind pfsense NAT not secure even with valid certificate

mmerlone — Fri, 27 Mar 2020 20:22:54 GMT

Never mind.

Just found a link to http://www.becpf.fr/becpg-plm-community-2.2.1.png on ./tomcat/webapps/share/WEB-INF/classes/alfresco/becpg-plm-share-config.xml. Changed to https and is all set.

Sorry for the noise, best regards.

Re: Alfresco behind pfsense NAT not secure even with valid certificate

EddieMay — Sat, 28 Mar 2020 15:07:33 GMT

Hi @mmerlone,

Great you found a solution and thanks for updating your thread - really useful to other users.

Re: Alfresco behind pfsense NAT not secure even with valid certificate

zerros — Sat, 28 Mar 2020 23:45:36 GMT

Hello,

sorry for my bad english. I'm actually creating a fresh infra to test alfresco using a pfsense in front. Using port-forwarding solution is not a good practice. The best way is to use a reverse proxy on top of alfresco (haproxy). pfsense can provide haproxy and use let's encrypt with acme, or you can forward all request to a reverse proxy component (apache, nginx, haproxy, etc) in front of alfresco