cancel
Showing results for 
Search instead for 
Did you mean: 

SSL CA - Apache vs Tomcat

coyoteugly
Champ in-the-making
Champ in-the-making
Hi to all, I'm interesting to perform a test configuration of alfresco 4.2.c Communuty (on Ubuntu 12.04) via https using an SSL certificate signed by a CA ( I'm going to request a limited free test certificate ).
I read different articles, blog and forum posts about this possibility, and I know there are two main way to do this:
-Install directly the new certificates on Tomcat, not a very difficult operation, but this can create some issues using SOLR and other protocols such as SharePoint support. I try to explore the documentation about SOLR, but it is not very clear to me how to make it works with the new CA certificate.
-Install an 'Apache Proxy' and running Tomcat and Alfresco under Apache httpd.

Due to your experiences, what is the best solution? What is the more reliable configuration? The easier? And what do you advice for a possible production system?
Any tips?

Thaks to all.
3 REPLIES 3

enkidu
Champ in-the-making
Champ in-the-making
hi.. why not using ur certificate for ssl (withing apache) and leave the installed certificate for solr search (defined in server.xml in tomcat)? thats the way i use it. work pretty damn well!

coyoteugly
Champ in-the-making
Champ in-the-making
Hi enkidu, thanks for the reply.
In fact, I performed a test and I implemented this solution. I use the SSL certificate with Apache Web Server and I 'connect' Apache and Tomcat using the mod_jk . It work fine.

Anyway before to definitely choose this solution for a production enviroment, I'm looking in the community for a comparison and for some considerations about differences, advantages and disadvantages for any solutions.

If I use the solution with apache and mod_jk I only enable the https navigation via web, but I do not encrypt any othe protocol an Alfresco. For example (if I need to use it) the Microsoft Office client need a trust https to use the SharePoint protocol.

I only wanted a discussion about this stuff Smiley Happy

102020
Champ on-the-rise
Champ on-the-rise