Share trying to contact www.alfresco.com

[lchoonch]

I've just spent the last 2 weeks configuring Alfresco and am very close to getting it ready.  I'm using Alfresco and Share on a limited internet connectivity environment.  I noticed that every time I load up the login page for Share, it seems to be trying to look up http://www.alfresco.com.  Normally, it won't be an issue except that I don't have access to the internet on my network and the login page will just hang until it time out looking for http://www.alfresco.com.  Is there any way to stop this in the configuration files ? Hints ?

Rgds
Lam

[ofrxnz]

I think this is in the footer of both share and alfresco…..I believe the footer is actually compiled into one of the jars…..

Thats all i know….

[oblivian]

I have the same problem, though slightly different. Corporate policies require any information passed over the internet to be encrypted, hence I have to run Alfresco over HTTPS/SSL. The problem is that the footer tries to connect to http://www.alfresco.com to download a logo, making the browser go mad with popups and failing to acknowledge the connection to be secure. The popups from IE7-8 are so intrusive that it renders Alfresco completely unusable. Firefox is a little better just warning once, but also with several visual feedbacks informing that the connection isn't secure.

I have scimmed through the human readable code, but the call to the footer isn't to be found so I guess it is compiled. I am completely unfamiliar to Java and Java compiling so I have no idea how to fix it, other than to wait for an update. It is a shame though since the entire implementation of Alfresco is beeing put on halt until we can run it over SSL without all these warnings and popups. It is also a bit disappointing since Alfresco at first seemed to be a killer opensource application working out-of-the-box for a change.

[mikeh]

The problem is that Tomcat doesn't know you're using an SSL connection. Just make sure Tomcat is being accessed over https when the Apache connection is.

Thanks,
Mike

[oblivian]

Hi Mike,

Thank you for reply. Just to clearify… are you saying I have to run the connection from Apache2 to Tomcat over SSL, even though it is localhost-reversed-proxied? Or is it a simple "option-select" from within Alfresco?

BTW, I applied the latest version from the nightly-builds and the external logo fetching is gone, but I still get the SSL sanity failure, so you are probably right.

Regards,

Oblivian

[oblivian]

Hello,

I'd really like someone to enlighted me on wether I have to run the connection from Apache2 to Tomcat6 encrypted to get rid of the SSL warnings. As stated, the connection is localhost reversed proxied.
What puzzles me is that we run other reverse proxies non-encrypted without getting these warnings.
Tomcat6/alfresco–http:8080-lport localhost–><–http:8080-dport localhost–Apache2–https:443-lport host.domain.tld–>|<-Firewall->|<–https:443-dport–Internet/clients

Oblivian

[mikeh]

Yes, Tomcat needs to know that your browsers are accessing Apache via SSL.

The alfresco.com logo is loaded by the browser, so the "src" attribute of the image tag needs to be "https" or "http" to match. This decision is made by the web application within Tomcat based on the connection it sees. Unless the connection from Apache to Tomcat is https, the image link won't be coded as such.

Thanks,
Mike

[dave984]

hi, i'm coming back on this topic that's the only i've found in th forum.
I have a basic istallation of Alfresco 4.2 c and i'm having this issue with a popup asking credential EVERY TIME an Alfresco's page is loaded…
Referring to what MikeH said: "Tomcat needs to know that your browsers are accessing Apache via SSL", how can i do this?
Is there a documentation some where?

[dave984]

hi, i'm coming back on this topic that's the only i've found in th forum.
I have a basic istallation of Alfresco 4.2 c and i'm having this issue with a popup asking credential EVERY TIME an Alfresco's page is loaded…
Referring to what MikeH said: "Tomcat needs to know that your browsers are accessing Apache via SSL", how can i do this?
Is there a documentation some where?