IIS 7.5 Reverse Proxy - SSL [Tutorial]

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

102020

Follow these steps to setup an IIS 7.5 Reverse Proxy. Allot of people are using Apache Reverse Proxy, but since we are running in a Windows environment, it logically made more sense to run this method.

Setup reverse proxy to wrap the connection with SSL. On your Alfresco machine, install IIS with default options.
Once installed download and install the following files:
URL Rewrite: http://www.iis.net/expand/URLRewrite
Application Request Routing: http://www.iis.net/expand/ApplicationRequestRouting

Open up IIS Manager, click on your server name, and on the main panel, open Application Request Routing. On the right hand column, click Server Proxy Settings…
Simply click Enable proxy, and then apply on the right.
Return to the same screen as before, and open Server Certificates, import your SSL cert (.pfx file is the easiest way to do that)
Now expand Sites, and select Default Web Site, and open URL Rewrite. On the right column, select Add Rule(s)…
You will get a popup, select Reverse Proxy from the list. Enter your non-ssl alfresco url, such as: hostname.fqdn.com:8080
Hi ok, now on the right column again, select Bindings, add your https binding and the certificate you want to tie to it. I would remove the http binding if you are not using it.
Save, and we are almost done!

Copy ALL of the content from C:\Alfresco-4.2.f\tomcat\webapps\share\WEB-INF\classes\alfresco\share-security-config.xml
*Note: You may want to open it using '**** NFO Viewer', as the formatting is screwed up in this file if you open in notepad.

We need to edit share-config-custom.xml, located: C:\alfresco\tomcat\shared\classes\alfresco\web-extension

Paste the content you copied to the bottom of the share-config-custom.xml file

***You want to change the following 2 values they are in brackets:

<referer></referer>
<origin></origin>
‍‍‍‍

they should look something like the below once you input your info:

<referer>https://hostname.fqdn.com/.*</referer>
<origin>https://hostname.fqdn.com</origin>
‍‍‍‍

Make sure on the referer line you have the /.* at the end. That all for now, save and close.



Now let's go try it out after starting up your Alfresco instance. simply goto https://hostname.fqdn.com/share
and you should be all wrapped up in SSL!

s4vva

Thank you for a great guide, however I am having difficulty following the guide past the iis settings.

I am able to view the login screen via the reverse proxy in iis which works fine however i receive an error message once I enter my login credentials and attempt to login.

Could someone please offer some guidance on what edits I need to make to config file in order to get this working?