Tomcat Redirect breaks Alfresco Download in IE

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

norgan

Good day,
I have a Tomcat Redirect : "For all Port 80 Requests, go to Port 443". This breaks the download function in Alfresco, when the user uses IE to access the HTTP Site.
Example : Word (*.doc) can open or download in Firefox 3.0 allright.
When I open the same http site with the same user via IE 6 & 7 get an error message "Internet Explorer could not open the internet site"

This happens with standard http (redirected to https) and webdav. Direct pure HTTPS works fine

Any ideas ? (HTTP is not available for tests, but the SSL cert is stored as "trusted root authority" keystore)

Norgan

norgan

Hi there,
I found the reason, but not the fix :

I made following change to the system :
I inserted a "security-constraint" forward for url "*"  in the tomcat/conf/web.xml

/<security-constraint>
&nbsp;&nbsp;&nbsp;&nbsp; <web-resource-collection>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <web-resource-name>Protected Context</web-resource-name>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <url-pattern>/*</url-pattern>
&nbsp;&nbsp;&nbsp;&nbsp; </web-resource-collection>
&nbsp; <!– auth-constraint goes here if you requre authentication –>
&nbsp;&nbsp;&nbsp;&nbsp; <user-data-constraint>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <transport-guarantee>CONFIDENTIAL</transport-guarantee>
&nbsp;&nbsp;&nbsp;&nbsp; </user-data-constraint>
</security-constraint>/ ‍‍‍‍‍‍‍‍‍‍

reason : I wanted all http queries to be forwarded to https to force the usage of https
Effect : The IE 7.0, Word, Excel and probably others, could no longer download any Office files from alfresco. A download via Firefox 3.0 works fine.

The moment I removed that securityconstraint again, all was fine.

Question : Does anyone have a tipp, what went wrong and how to reach my goal anyway ? (No, I cant forbid the usage of IE )

server.xml :

&nbsp;&nbsp;&nbsp; <Connector port="80" URIEncoding="UTF-8" maxHttpHeaderSize="8192"
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; enableLookups="false" redirectPort="443" acceptCount="100"
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; connectionTimeout="20000" disableUploadTimeout="true" />
‍‍‍‍‍