Howto Secure Alfresco with https: access?

[dholgado]

Can someone please explain how to configure alfresco 2.1.0 so that it is accesable via web only through https://

The system is running the Alfresco 2.1.0 tomcal bundle on linux with a mysql database

The linux distribution I have used is debian etch 4.0

I would also like to know how I can configure alfresco so that the user spaces are only accesable by the user alone.

Thank you

[mavo]

it might be easy to do it with reverse proxing and apache.

1. set a redirect option in your conf.d files
redirect / https://..../
2. create a virtual maschine and set reverse proxy
ProxyPass /alfresco localhost:8080/alfresco
ProxyPassReverse /alfresco localhost:8080/alfresco

[dholgado]

Thank you very much, I will give it a try this afternoon.

Hope you have a good day
Regards

[kevinr]

Can someone please explain how to configure alfresco 2.1.0 so that it is accesable via web only through https://

The system is running the Alfresco 2.1.0 tomcal bundle on linux with a mysql database

The linux distribution I have used is debian etch 4.0

I would also like to know how I can configure alfresco so that the user spaces are only accesable by the user alone.

It is simple to setup TomCat to use HTTPS - see the file tomcat/conf/server.xml - look for the section
<!– Define a SSL HTTP/1.1 Connector on port 8443 –>
and enable it. Then you can access TomCat on port 8443 (or whatever you configure) to use Alfresco in HTTPS mode.

You can change the permissions on any folder space using the web-client Manage Space Users action for a space. On a user Home Space simply remove the EVERYONE user from those invited to the space - then only the owner user and admin can access it.

Thanks,

Kevin

Thanks,

Kevin

[houlnx]

Thanks! Worked for me. Version - labs 3 B.

[bnice]

Hi,

I followed your hints and activated https on Port 8443 in the tomcat configuration, but it some not to have any effekt, even after restart of alfresco and the whole server too.
Do I have to change any other file in version 3.0.0 (stable)?

[bnice]

Found the problem - I didn't create the keystore before…
Here's a good guide on how to enable SSL in Tomcat: http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html
You'll have to add some options like keystore-home and keystorePass in the server.xml, like:


<!– Define a SSL HTTP/1.1 Connector on port 8443
         This connector uses the JSSE configuration, when using APR, the
         connector should be using the OpenSSL style configuration
         described in the APR documentation –>
    <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
               maxThreads="150" scheme="https" secure="true" keystoreFile="${user.home}/.keystore" keystorePass="Password"
               clientAuth="false" sslProtocol="TLS" />

You'll have to pay attention on using the same password like you did when creating the keystore file.

[pescha]

I followed the instructions on this page and on the Apache link.  For some reason when I connect to the 8443 port it wants to send me a bin file now.  Any ideas?  I am using Alfresco on Ubuntu and I am connecting using localhost for now.

[pescha]

Pay no attention to my previous post.  It was a simple matter of putting "https" before localhost:8443

I am having problems getting Share to work with SSL however.  The regular /alfresco works like a charm.  I am getting authentication errors in Share.

[lunchbox]

Hi All

I am having problems getting Share to work with SSL however.  The regular /alfresco works like a charm.  I am getting authentication errors in Share.

Is there a fix for using share with https? I've just set up 3.2 with https and share still fails

many thanks,
Niels