SSL with reverse proxy and the Alfresco logo.

[ftclausen]

Hello,

Intro -

Yes, I appreciate those may seem somewhat unrelated but bear with me. I am using Alfresco community version 2.1 and it is listening on localhost with SSL being handled by Apache using mod_proxy and mod_proxy_ajp to redirect requests for Alfresco to the Alfresco instance on localhost. My motivation for doing it this was that we have other URLs currently being serviced by Apache and we would prefer people to just use different locations on port 80 (saves firewall hassle).

* https://www.example.com/alfresco -> this is redirected by mod_proxy_ajp using the AJP protocol to ajp://127.0.0.1:8009/alfresco
* https://www.example.com/alfresco/webdav -> this is redirected by mod_proxy using HTTP to http://127.0.0.1:8080/alresco/webdav
* https://www.example.com/some/other/static/location -> some static files served directly by Apache, unrelated to Alfresco.

The Issue -

The issue is that we keep on getting loads of browser warnings about some content being secure and some not (we have all seen that from time to time on other sites) and it turns out that the Alfresco community logo is sourced from "http://www.alfresco.com/…" thereby triggering the warning. Now, I feel it is fair to give attribution to Alfresco for using the software but how can I make it use "https://www.alfresco.com/…" instead? I checked, the image can be accessed via HTTPS.

Many many thanks for any answers.

Regards,

Fred.

[sthurrott]

Did you ever resolve this?  What file is the image located in?

Thanks

[ftclausen]

Hi,

No, it appears to be buried deep within the WAR file and is not trivial to change. We have temporarily just disabled notifications for those kind of things and I have recommended to the powers that be that we should use the Enterprise edition.

Cheers,

Fred.

[sthurrott]

how do you disable notifications for it?

Thanks

[ftclausen]

It depends on the browser - I have not encountered this warning with Firefox and apparently it is possible to disable it completely for IE. I am not entirely sure how since I only have a Mac and Linux boxes.

Cheers,

Fred.

[stateless]

Need to convert the http img link to a https img link. Probably involves hacking and repacking the alfresco source which is not straight-forward.

I fixed a similar issue with Weberp and the sourceforge logo: http://www.nabble.com/https-and-IE-td19265871.html. 

Sometimes I wish Alfresco was written in a more open scripting language like php or ruby, with java components for the CIFS and backend stuff. Would make it more accessible.