Share over SSL alert in Internet Explorer

[aheaven]

Hi !

   I added a SSL connector on port 443 in Tomcat, and now I am accessing Share in https without any problem except for a warning in Internet Explorer that says that I have secured and non-secured content… I get that in any page even after removing the Alfresco Network dashlet that causes the same warning in Firefox…

   Do you know what does that ? Is there any settings I should change ?

   Thanks for your help !

Steve

[aheaven]

Seems to be related to :

https://issues.alfresco.com/jira/browse/ETHREEOH-972?page=com.atlassian.jira.plugin.system.issuetabp...

Is there any possible fix right now with community edition ?

[mikeh]

The only fix right now would be to use an Apache web server to handle the SSL requests rather than Tomcat directly.

UPDATE: The fix has just been applied to HEAD, so if you grab the source from SVN and rebuild you'll be ok.

Mike

[aheaven]

Thanks for the heads up ! I did that and it solved the problem, that's great !

We are ready for production now ! I'm really happy with the product, will be used by a couple of hundreds of people in our company !

[mikeh]

That's great to hear. Please encourage your users to feed-back (both good and bad!) and raise any issues and enhancement requests in JIRA so we can continue to improve the product.

Thanks,
Mike

[sylvain_d]

Hello,

I did something similar, an apache server to handle https.

However since that the upload with share did work.

Is there something else to set up share with HTTPS ?


thanks

[mikeh]

There are known issues with Flash and https-secured sites when accessed with browsers other than MSIE.

Please see https://issues.alfresco.com/jira/browse/ETHREEOH-884

Thanks,
Mike

[sylvain_d]

Hello,

As it's said in the Jira, I tried to patch my community version with the class only MessagesWebScript

However, when restarting Share I got the following stack

09:39:32,659 ERROR [org.apache.catalina.core.ContainerBase.[Standalone].[].[/share]] Exception sending context initialized         event to listener instance of class org.springframework.web.context.ContextLoaderListener
org.springframework.beans.factory.CannotLoadBeanClassException: Error loading class [org.alfresco.web.scripts.MessagesWebScript] for bean with name 'w        ebscript.org.alfresco.web.messages.get' defined in class path resource [alfresco/web-framework-application-context.xml]: problem with class file or de        pendent class; nested exception is java.lang.ClassFormatError: Invalid constant pool index 63 in class file org/alfresco/web/scripts/MessagesWebScript
Caused by: java.lang.ClassFormatError: Invalid constant pool index 63 in class file org/alfresco/web/scripts/MessagesWebScript
        at java.lang.ClassLoader.defineClass1(Native Method)
        at java.lang.ClassLoader.defineClass(ClassLoader.java:620)
        at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:124)
        at org.apache.catalina.loader.WebappClassLoader.findClassInternal(WebappClassLoader.java:1812)
        at org.apache.catalina.loader.WebappClassLoader.findClass(WebappClassLoader.java:866)
        at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1319)
        at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1198)
        at org.springframework.util.ClassUtils.forName(ClassUtils.java:201)
        at org.springframework.beans.factory.support.AbstractBeanDefinition.resolveBeanClass(AbstractBeanDefinition.java:327)
        at org.springframework.beans.factory.support.AbstractBeanFactory.resolveBeanClass(AbstractBeanFactory.java:1075)
        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:346)
        at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:270)
        at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:160)
        at org.springframework.context.support.AbstractApplicationContext.getBean(AbstractApplicationContext.java:733)
        at org.alfresco.web.scripts.DeclarativeRegistry.initWebScripts(DeclarativeRegistry.java:313)
        at org.alfresco.web.scripts.DeclarativeRegistry.reset(DeclarativeRegistry.java:174)
        at org.alfresco.web.scripts.AbstractRuntimeContainer.reset(AbstractRuntimeContainer.java:231)
        at org.alfresco.web.scripts.AbstractRuntimeContainer.onApplicationEvent(AbstractRuntimeContainer.java:254)
        at org.springframework.context.event.SimpleApplicationEventMulticaster$1.run(SimpleApplicationEventMulticaster.java:77)
        at org.springframework.core.task.SyncTaskExecutor.execute(SyncTaskExecutor.java:49)
        at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:75)
        at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:246)
        at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:355)
        at org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:244)
        at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:187)
        at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:49)
        at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3729)
        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4187)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:759)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:739)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:524)
        at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:608)
        at org.apache.catalina.startup.HostConfig.deployDescriptors(HostConfig.java:535)
        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:470)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1122)
        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:310)
        at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1021)
        at org.apache.catalina.core.StandardHost.start(StandardHost.java:718)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1013)
        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:442)
        at org.apache.catalina.core.StandardService.start(StandardService.java:450)
        at org.apache.catalina.core.StandardServer.start(StandardServer.java:745)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:551)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:294)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:432)
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

It seems that the class version is not know or something like that.

Any ideas ?

Should I change the whole jar ? (alfresco-webscript-framework.jar)

thanks

[mikeh]

HEAD has moved on a lot since that update. I'd recommend  either manually patching by looking at the SVN diff info, or grab the whole tree and get the Enterprise bug fixes too.

Thanks,
Mike

[sylvain_d]

I grabed the alfresco-web-framework.jar for the last nightybuild and put it in my share/WEB-INF/lib folder

Even if the MessagesWebScript.class is correct (no http link for the commuynity picture) I still have a warning in IE telling that some element are not secure.

With an header capture tool I can see a request made to http://alfresco...community…