Help me secure Alfresco (SSL)

[newadmin]

Hello all,

We've been using Alfresco in our environment for a while now and now want to make it accessible outside our network. Before we can do so we of course want to secure it with SSL. I've been looking at the instructions in the Alfresco documentation, but I'm a bit confused. I have imported the SSL certificate into a keystore with the alias tomcat.jks, but I cant quite figure out how to configure Alfresco.

In the documentation it says to add the following to the server.xml file:

<Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol" SSLEnabled="true"
               maxThreads="150" scheme="https" keystoreFile="../../data/keystore/ssl.keystore" keystorePass="kT9X6oe68t" keystoreType="JCEKS"
secure="true" connectionTimeout="240000" truststoreFile="../../data/keystore/ssl.truststore" truststorePass="kT9X6oe68t" truststoreType="JCEKS"
               clientAuth="false" sslProtocol="TLS" /> 

A few things I don't understand about this.

1) I don't know what a JECKS keystore type is, or how to figure out what kind of keystore I have.
2) I don't know what the truststore file is or how to use it. Should I leave these values at defaults or adjust them for my specific setup?

Any assistance you could provide would be appreciated. My installation is running on Windows 2008.

Thanks!

[zaizi]

What Alfresco documentation did you follow? Think you may have followed the documentation on how to encrypt communication between Alfresco and Solr.

To enable remote access to Alfresco via SSL, just look up documentation on how to enable SSL for Tomcat (version used in Alfresco) or what ever web server you are using to front end your Alfresco installation. http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html

Ainga

[newadmin]

What Alfresco documentation did you follow? Think you may have followed the documentation on how to encrypt communication between Alfresco and Solr.

To enable remote access to Alfresco via SSL, just look up documentation on how to enable SSL for Tomcat (version used in Alfresco) or what ever web server you are using to front end your Alfresco installation. http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html

Ainga

You are right I was looking at the documentation for Solr and didn't realize it. Still I followed the tomcat documentation and still wasn't able to get it working. I've decided I'm going to move to Linux and use Apache as a front end, however that is proving to have it's challenges as well.

[mf_in_ffm]

I'd like to suggest to you using Nginx instead of Apache as a proxy.
I've had a lot of trouble with the sharepoint protocol and there is no IMAP Proxy using Apache.
And Nginx it's pretty fast.

[kuldeep]

Hi mf_in_ffm,

I too am using nginx as a proxy and am unable to get the shrepoint protocol working. Could you guide me what changes are needed?

My Alfresco installation is 4.2.D with default installation on port 8080 and 8443.

Thanks in advance