Proxy SPP with Apache and SSL

[iamchris]

Trying to make the SPP portion of Alfresco work over https by using Apache 2 as a reverse proxy.

Windows 7, Word 2007 on the workstation…

I can get Word to create the workspace, but it fails when it tries to upload the document. If I run bare http://docs.foo.com:7070 it seems to work fine, so there is something that isn't getting through the reverse proxy. Any help is greatly appreciated.

Here's the relevant parts of my httpd.conf:

<VirtualHost *:80>
        ServerName docs.foo.com
        RewriteEngine on
        RewriteCond %{HTTPS} !=on
        RewriteRule ^(.*)$ "https://docs.foo.com$1" [R,L]
</VirtualHost>

<VirtualHost *:80>
        ServerName spp.foo.com
        RewriteEngine on
        RewriteCond %{HTTPS} !=on
        RewriteRule ^(.*)$ "https://spp.foo.com$1" [R,L]
</VirtualHost>

#docs
<VirtualHost 10.0.0.88:443>
        ProxyRequests Off
        ProxyPreserveHost On
        SSLEngine on
        ProxyPass  /share  ajp://127.0.0.1:8009/share retry=5
        ProxyPass  /alfresco  ajp://127.0.0.1:8009/alfresco retry=5
        ProxyPassReverse  /share  ajp://127.0.0.1:8009/share
        ProxyPassReverse  /alfresco  ajp://127.0.0.1:8009/alfresco
        RewriteEngine on
        RewriteRule ^/$ "https://docs.foo.com/share/" [R=302,L]
</VirtualHost>

#spp
<VirtualHost 10.0.0.89:443>
    SSLEngine on
    ProxyRequests Off
    ProxyPreserveHost On
    ProxyPass / http://127.0.0.1:7070/
    ProxyPassReverse / http://127.0.0.1:7070/
</VirtualHost>

[iamchris]

…nudge…

[iamchris]

More data here…

Apparently Office is trying to upload the documents to http://spp.foo.com/..../document.docx not HTTPS. The 302 redirect is probably a bad idea if Office is going to post to that URL, so I removed it.

If I proxy over http, I can manage the document workspace without a problem.

Where is Office picking up "http" from??

Here are the relevant parts of alfresco-global.properties

-=-

alfresco.context=alfresco
alfresco.host=docs.foo.com
alfresco.port=443
alfresco.protocol=https

share.context=share
share.host=docs.foo.com
share.port=443
share.protocol=https

### SPP Server ###
vti.server.external.host=https://docs.foo.com
vti.server.external.port=443
vti.server.port=7070
vti.alfresco.deployment.context=/alfresco
vti.alfresco.alfresoHostWithPort=https://docs.foo.com:443
vti.share.shareHostWithPort=https://docs.foo.com:443

-=-

[loftux]

This is what I have

<VirtualHost *:80>

        ServerName office.example.com

        <Proxy *>
                Order Deny,Allow
                Deny from all
                Allow from all
        </Proxy>
        ProxyRequests off
        ProxyVia On
        ProxyPreserveHost On
        ProxyPass /doc http://localhost:7070/doc
        ProxyPassReverse /alfresco http://localhost:7070/alfresco
        ProxyPass / http://localhost:7070/
        ProxyPassReverse / http://localhost:7070/

</VirtualHost>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I do not remember  :?  why there is a /doc one in there, if it was needed or if it was that I experimented giving the ssp an alternate subfolder.

[iamchris]

Thanks for the reply.

That config works, but it isn't SSL.

I believe I've narrowed down the issue to Office, even though the document workspace gets set up https://spp.example.com, wants to upload and access the documents at http://spp.example.com. I'm not sure if Alfresco is somehow reporting http to Office or if the problem lies inside Office itself.

Why does Office desire http even though the initial workspace setup is over https?

[franzpolik]

Hi,

are you sure that you didn't simply mistype a word?

Your post includes:

### SPP Server ###
vti.server.external.host=https://docs.foo.com
vti.server.external.port=443
vti.server.port=7070
vti.alfresco.deployment.context=/alfresco
vti.alfresco.alfresoHostWithPort=https://docs.foo.com:443
vti.share.shareHostWithPort=https://docs.foo.com:443

Best wishes,
Francesco