How do I add a .pfx pkcs12 certificate to Alfresco

[prignony]

Hello,

I've a community 5 (latest) installed, it is protected via ssl, keystore and truststore generated by alfresco adhoc tool.

How do I add a .pfx pkcs12 certificate to that Alfesco installation ? When I change server.xml to use the pfx as keystore, nothing is working anymore, I mean all the share function linked to index solr don't work and I've a error like "can't find certified path".

Thanks in advance for your help

Best Regards,

Yves Prignon

[kaynezhang]

Please refer to Solr 4 security | Alfresco Documentation

[prignony]

Thanks for your answer, I already read that part and it doesn't help. We use the same tomcat for alfresco, share and solr, default install from the installer.

The page says "you must generate your own keys" but that is already done, it work (generate_keystores.bat), what I need is my .pfx certificate to certify that my website address is the real one. And that doesn't work when I change the server.xml file.

What should I do to add my pfx to Alfresco ?

[angelborroy · Accepted solution]

Maybe this can help: Configuring Alfresco SSL certificates | Programming and So

[prignony]

Thanks you, that is much better, I'll try that tonight! It might work for me.

I read that we need two certificate, we only paid for one to certify our domain name. Can we use the same for solr and alfresco?

[angelborroy]

Yes, you can use the same for both Alfresco and SOLR

[prignony]

Yes I did it Thanks you guys!
I used KeyStore Explorer to help me with the pfx to keystore, added my certificate, changed the pw to match alfresco, solr and mine. Then I renamed and copied the stores to solr4

Perfect, great help!

[morganp1]

Hello,

In case you don't want to mess with the Alfresco default settings and just want to protect your installation with SSL, you can also take a look at this blog: Protect Alfresco with Apache httpd in SSL​

This procedure isn't related to Alfresco so it will work with any tool, including Alfresco of course .

Regards,

Morgan