How to set-up HTTPS/SSL

[mweber37]

Hi,

I've set up Alfresco Community Edition 5.0d on Tomcat/Ubuntu and configured Sharepoint Protocol Support successfully.

Now, I want to configure http/SSL, but I am a little confused because in the documentation there are two different chapters:
- Configuring SharePoint Protocol with SSL (http://docs.alfresco.com/community/tasks/SharePoint-SSL.html)
- Setting up SharePoint Protocol Support to work with HTTPS (http://docs.alfresco.com/community/tasks/SharePoint-HTTPS-setup.html)

I don't get what the difference is and if I should follow both instructions or just one of the two.

Any hint is highly appreciated!

Many thanks
Michael

[mweber37]

Hi there,

can anybody point me into the right direction?

Any hints are highly appreciated!

Many thanks
Michael

[pdamen2]

Same question here, i tried several tutorials and pages but couldn't find a solution unfortunately..
I hope someone has a complete tutorial to configure alfresco 5 with ssl.

Kind regards
Peter

[digiwill]

hey guys,

same here…see my issue
https://forums.alfresco.com/forum/installation-upgrades-configuration-integration/configuration/keyt...

the doc you can find online is very confusing imo. hope Boris can give some clearance

[pdamen2]

I got so far as forcing tomcat to use port 443 over a self signed certificate and edited the tomcat "server.xml" and the alfresco configuration file and changed the port for ssl to 443. Somehow after i try to connect to it, it takes forever to load and then the port closes. I'm pretty clueless at the moment, i'm going to try to follow some documentation about a proxy server.

[kevvo]

#Versions

#ubuntu 14.04 LTS

#Alfresco Share v5.1.f

#(r125711-b6, Aikau 1.0.63, Spring Surf 5.1.f, Spring WebScripts 6.5, Freemarker 2.3.20-alfresco-patched, Rhino 1.7R4-alfresco-patched, Yui 2.9.0-alfresco-20141223)

#Alfresco Community v5.1.0

#(r127059-b7) schema 10001

# Begin Installs of dependancies

apt-get install openjdk-7-jre-headless -y

apt-get install phablet-tools -y

cd /etc/ssl/certs/

# The keystore.password is in this file /opt/alfresco-community/alf_data/keystore/ssl-keystore-passwords.properties

# keytool -genkey -alias repo -keyalg RSA -keystore ssl.keystore -storetype JCEKS -storepass <keystore.password>

keytool -genkey -alias repo -keyalg RSA -keystore ssl.keystore -storetype JCEKS -storepass kT9X6oe68t

#Enter details you want in your server cert here FQDNS(CN), Org Unit(OU), Org Name(O), City(L), State(ST) and Country(C), then confirm.(YOUR SERVER "Issued to")

#confirm yes

# use store password for passphrase kT9X6oe68t

keytool -keystore ssl.keystore -alias repo -certreq -file repo.csr -storetype JCEKS -storepass kT9X6oe68t

sudo openssl req -new -x509 -newkey rsa:1024 -days 1825 -keyout server.key -out server.crt

# use store password for passphrase kT9X6oe68t

# Enter details you want in your root ca cert here Country(C), State(ST0, City(L), Org Name(O), Org Unit (OU) and FQDNS(CN). (ROOT CA "Issued by")

GB

UK

Maidenhead

Alfresco Software Ltd.

[ENTER]

Alfresco Repository

[ENTER]

openssl x509 -CA server.crt -CAkey server.key -CAcreateserial -req -in repo.csr -out repo.crt -days 1825

#use passphrase kT9X6oe68t for server key.

keytool -import -alias AlfrescoCA -file server.crt -keystore ssl.keystore -storetype JCEKS -storepass kT9X6oe68t

# confirm yes

keytool -import -alias repo -file repo.crt -keystore ssl.keystore -storetype JCEKS -storepass kT9X6oe68t

keytool -importkeystore -srckeystore ssl.keystore -srcstorepass kT9X6oe68t -srcstoretype JCEKS -srcalias repo -srckeypass kT9X6oe68t -destkeystore browser.p12 -deststoretype pkcs12 -deststorepass alfresco -destalias repo -destkeypass alfresco

keytool -import -alias AlfrescoCA -file server.crt -keystore ssl.truststore -storetype JCEKS -storepass kT9X6oe68t

#Confirm yes

cd /opt/alfresco-community/alf_data/keystore

mv ssl.keystore ssl.keystore.old

mv ssl.truststore ssl.truststore.old

mv browser.p12 browser.p12.old

cd /etc/ssl/certs/

mv ssl.* /opt/alfresco-community/alf_data/keystore/

mv browser.p12 /opt/alfresco-community/alf_data/keystore/

service alfresco restart

# If you want to backout the changes then delete the copied files and restore the old file.

#View the certificate, click on certification path, select the root ca cert (in this example it will be "Alfresco Repository", click view certificate, click install certificate, select trusted root authority.

#refresh your browser and youre done.