Hello,
I will start off to say I am not an Apache/Alfresco/SSL guru. So I will need some detailed explanations.
I have used the Bitnami Alfresco appliance in the past and got SSL to work. I just created a new instance with the latest Bitnami appliance but cannot get SSL working following the same procedure as before.
Any help or suggestions to track down where the problem exist. I do not get any errors when trying to start the tomcat service. I can see the site does redirect port 80 to 8443 but I never get the login screen. Alfresco works before I try to enable the SSL so the root application is functioning.
Procedure:
Generate key:
cd /opt/bitnami/java/bin/
sudo keytool -genkey -alias tomcat -keyalg RSA -keystore $HOME/alfresco/ssl/keystore -keysize 2048 –validity 1825
Modify /opt/bitnami/apache-tomcat/conf/servier.xml
<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" keystoreFile="/opt/bitnami/apache-tomcat/conf/ssl/keystore"
keystorePass="%SamePasswordAsSSLcert" />
Modify /opt/bitnami/apache-tomcat/conf/web.xml
<!-- ======================== HTTPS Redirection ========================= -->
<!-- This section has been customized to redirect web resources to HTTPS -->
<security-constraint>
<web-resource-collection>
<web-resource-name>Entire Application</web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
Modify /opt/bitnami/apache-tomcat/shared/classes/alfresco/web-extension/share-config-custom.xml
<endpoint>
<id>alfresco</id>
<name>Alfresco - user access</name>
<description>Access to Alfresco Repository WebScripts that require user authentication</description>
<connector-id>alfresco</connector-id>
<endpoint-url>https://localhost:8443/alfresco/s</endpoint-url><identity>user</identity>
</endpoint>
Export the SSL:
cd $HOME/alfresco/ssl
/opt/bitnami/java/bin/keytool –export –alias tomcat –keypass “%SamePasswordAsSSLcert%” –storepass “%SamePasswordAsSSLcert%” –keystore ~/alfresco/ssl/keystore –file server.cert
Import the SSL:
cd $HOME/alfresco/ssl
sudo /opt/bitnami/java/bin/keytool –import –alias tomcat –file server.cert –keypass “%SamePasswordAsSSLcert%” –storepass changeit –keystore /opt/bitnami/java/jre/lib/security/cacerts
Modify the Alfresco Global Properties /opt/bitnami/apache-tomcat/shared/classes/alfresco-global.properties:
###############################
## Common Alfresco Properties #
###############################
dir.root=/opt/bitnami/apps/alfresco/data
web.application.context.url=https://127.0.0.1:8443/alfresco
alfresco.context=alfresco
alfresco.host=127.0.0.1
alfresco.port=8443
alfresco.protocol=https
share.context=share
share.host=127.0.0.1
share.port=8443
share.protocol=https
