Configuring SSL Alfresco

cancel
Showing results for 
Search instead for 
Did you mean: 
jbrasil
Active Member II

Configuring SSL Alfresco

Hi,
I followed the website documentation below:
https://docs.alfresco.com/5.1/tasks/configure-ssl-prod.html
And it didn't work to enable https.
Have you come across this situation?
With best regards,

2 Replies
afaust
Master

Re: Configuring SSL Alfresco

What did not work? What are the issues exactly? Without any details, the situation is too vague to say "yeah, I have seen this". And no, I have not seen that - if the documentation is followed properly with full understanding of what needs to be done, and without skipping anything, it should work.

jbrasil
Active Member II

Re: Configuring SSL Alfresco

Hi afaust,
Follow the settings nginx:

The settings in alfresco-global.properties I made as per documentation.
Something is missing?

/etc/nginx/conf.d
alfresco.conf

cat alfresco.conf | more

# Set proxy cache path
proxy_cache_path /var/cache/nginx/alfresco levels=1 keys_zone=alfrescocache:256m max_size=512m inactive=1440m;

# Alfresco Repository Tomcat instance
upstream alfresco {
server localhost:8080;
}

# Share Web client Tomcat instance
upstream share {
server localhost:8080;
}

# Default server config. Update server name.
server {
listen 80 ;
listen [::]:80 ;
proxy_redirect http://206.189.234.255 https://206.189.234.255;
server_name 206.189.234.255;
rewrite ^/$ /share;

root /opt/alfresco/www;
index index.html index.htm;

# Redirect root requests to Share. Do not do this if you use AOS
# rewrite ^/$ /share;

# redirect server error pages to the static page /50x.html
#
error_page 502 503 504 /maintenance.html;
location = /maintenance.html {
root /opt/alfresco/www;
}

# Access to old Alfresco web client. Remove this location if not needed.
location /alfresco {

# Allow for large file uploads
client_max_body_size 0;

# Proxy all the requests to Tomcat
proxy_http_version 1.1;
#proxy_buffering off;
proxy_pass http://alfresco;

proxy_set_header Proxy "";
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header X-Forwarded-Server $host;
}

location /share/proxy/alfresco {
# This section is for allowing to rewrite 50x response to 401 on Ajax req.
# This forces Share to reload page, and thus display maintenance page

# Allow for large file uploads
client_max_body_size 0;

# Proxy all the requests to Tomcat
proxy_http_version 1.1;
#proxy_buffering off;
proxy_pass http://share;

proxy_set_header Proxy "";
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header X-Forwarded-Server $host;
proxy_intercept_errors on;
error_page 502 503 504 =401 /maintenance.html;
}

location /share/res/ {

# Proxy all the requests to Tomcat
proxy_http_version 1.1;