Quantcast
Channel: BitNami Answers - latest questions
Viewing all articles
Browse latest Browse all 2052

BitNami Alfresco Stack 4.2.c-2 AWS Appliance - Enable SSL

$
0
0

Hello, I will start off to say I am not an Apache/Alfresco/SSL guru. So I will need some detailed explanations. I have used the Bitnami Alfresco appliance in the past and got SSL to work. I just created a new instance with the latest Bitnami appliance but cannot get SSL working following the same procedure as before.

Any help or suggestions to track down where the problem exist. I do not get any errors when trying to start the tomcat service. I can see the site does redirect port 80 to 8443 but I never get the login screen. Alfresco works before I try to enable the SSL so the root application is functioning.

Procedure:

Generate key:

cd /opt/bitnami/java/bin/

sudo keytool -genkey -alias tomcat -keyalg RSA -keystore $HOME/alfresco/ssl/keystore -keysize 2048 –validity 1825

Modify /opt/bitnami/apache-tomcat/conf/servier.xml

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
    maxThreads="150" scheme="https" secure="true" 
    clientAuth="false" sslProtocol="TLS"                                                                      keystoreFile="/opt/bitnami/apache-tomcat/conf/ssl/keystore"
keystorePass="%SamePasswordAsSSLcert" />

Modify /opt/bitnami/apache-tomcat/conf/web.xml

<!-- ======================== HTTPS Redirection ========================= -->
  <!-- This section has been customized to redirect web resources to HTTPS  -->
  <security-constraint>
        <web-resource-collection>
           <web-resource-name>Entire Application</web-resource-name>
                <url-pattern>/*</url-pattern>
        </web-resource-collection>
        <user-data-constraint>
                <transport-guarantee>CONFIDENTIAL</transport-guarantee>
        </user-data-constraint>
</security-constraint>

Modify /opt/bitnami/apache-tomcat/shared/classes/alfresco/web-extension/share-config-custom.xml

<endpoint>
            <id>alfresco</id>
            <name>Alfresco - user access</name>
            <description>Access to Alfresco Repository WebScripts that require user authentication</description>
            <connector-id>alfresco</connector-id>
            <endpoint-url>https://localhost:8443/alfresco/s</endpoint-url><identity>user</identity>
         </endpoint>

Export the SSL:

cd $HOME/alfresco/ssl
/opt/bitnami/java/bin/keytool –export –alias  tomcat –keypass “%SamePasswordAsSSLcert%” –storepass “%SamePasswordAsSSLcert%” –keystore ~/alfresco/ssl/keystore –file server.cert

Import the SSL:

cd $HOME/alfresco/ssl
sudo /opt/bitnami/java/bin/keytool –import –alias tomcat –file server.cert –keypass “%SamePasswordAsSSLcert%” –storepass changeit –keystore /opt/bitnami/java/jre/lib/security/cacerts

Modify the Alfresco Global Properties /opt/bitnami/apache-tomcat/shared/classes/alfresco-global.properties:

###############################
## Common Alfresco Properties #
###############################

dir.root=/opt/bitnami/apps/alfresco/data
web.application.context.url=https://127.0.0.1:8443/alfresco

alfresco.context=alfresco
alfresco.host=127.0.0.1
alfresco.port=8443
alfresco.protocol=https

share.context=share
share.host=127.0.0.1
share.port=8443
share.protocol=https

Viewing all articles
Browse latest Browse all 2052

Trending Articles