As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.
#Versions
#ubuntu 14.04 LTS
#Alfresco Share v5.1.f
#(r125711-b6, Aikau 1.0.63, Spring Surf 5.1.f, Spring WebScripts 6.5, Freemarker 2.3.20-alfresco-patched, Rhino 1.7R4-alfresco-patched, Yui 2.9.0-alfresco-20141223)
#Alfresco Community v5.1.0
#(r127059-b7) schema 10001
# Begin Installs of dependancies
apt-get install openjdk-7-jre-headless -y
apt-get install phablet-tools -y
cd /etc/ssl/certs/
# The keystore.password is in this file /opt/alfresco-community/alf_data/keystore/ssl-keystore-passwords.properties
# keytool -genkey -alias repo -keyalg RSA -keystore ssl.keystore -storetype JCEKS -storepass <keystore.password>
keytool -genkey -alias repo -keyalg RSA -keystore ssl.keystore -storetype JCEKS -storepass kT9X6oe68t
#Enter details you want in your server cert here FQDNS(CN), Org Unit(OU), Org Name(O), City(L), State(ST) and Country(C), then confirm.(YOUR SERVER "Issued to")
#confirm yes
# use store password for passphrase kT9X6oe68t
keytool -keystore ssl.keystore -alias repo -certreq -file repo.csr -storetype JCEKS -storepass kT9X6oe68t
sudo openssl req -new -x509 -newkey rsa:1024 -days 1825 -keyout server.key -out server.crt
# Enter details you want in your root ca cert here Country(C), State(ST0, City(L), Org Name(O), Org Unit (OU) and FQDNS(CN). (ROOT CA "Issued by")
GB
UK
Maidenhead
Alfresco Software Ltd.
[ENTER]
Alfresco Repository
openssl x509 -CA server.crt -CAkey server.key -CAcreateserial -req -in repo.csr -out repo.crt -days 1825
#use passphrase kT9X6oe68t for server key.
keytool -import -alias AlfrescoCA -file server.crt -keystore ssl.keystore -storetype JCEKS -storepass kT9X6oe68t
# confirm yes
keytool -import -alias repo -file repo.crt -keystore ssl.keystore -storetype JCEKS -storepass kT9X6oe68t
keytool -importkeystore -srckeystore ssl.keystore -srcstorepass kT9X6oe68t -srcstoretype JCEKS -srcalias repo -srckeypass kT9X6oe68t -destkeystore browser.p12 -deststoretype pkcs12 -deststorepass alfresco -destalias repo -destkeypass alfresco
keytool -import -alias AlfrescoCA -file server.crt -keystore ssl.truststore -storetype JCEKS -storepass kT9X6oe68t
#Confirm yes
cd /opt/alfresco-community/alf_data/keystore
mv ssl.keystore ssl.keystore.old
mv ssl.truststore ssl.truststore.old
mv browser.p12 browser.p12.old
mv ssl.* /opt/alfresco-community/alf_data/keystore/
mv browser.p12 /opt/alfresco-community/alf_data/keystore/
service alfresco restart
# If you want to backout the changes then delete the copied files and restore the old file.
#View the certificate, click on certification path, select the root ca cert (in this example it will be "Alfresco Repository", click view certificate, click install certificate, select trusted root authority.
#refresh your browser and youre done.