{"id":8060,"date":"2016-05-25T15:28:54","date_gmt":"2016-05-25T13:28:54","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/"},"modified":"2016-05-25T15:28:54","modified_gmt":"2016-05-25T13:28:54","slug":"alfresco-protect-your-installation-with-apache-httpd","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/","title":{"rendered":"Alfresco &#8211; Protect your installation with Apache httpd"},"content":{"rendered":"<p>In this blog, I will talk about the setup of an Apache httpd server with\/without SSL configuration on top of your Alfresco installation. This way of configuring Apache httpd in front of your Web Application can be reused very easily for all other applications like your intranet, competency center, resource planning, aso&#8230; It is NOT specific to Alfresco and this is what makes this blog very useful!<\/p>\n<p style=\"padding-bottom: 5px\">When you install Alfresco using the installer provided, you will get a tomcat setup on port 8080 (by default) which is also listening on port 8443 with an SSL Certificate generated by Alfresco for the communications between the Alfresco repository and the Solr engine. You can use this SSL Certificate to secure your Alfresco installation but there are two restrictions:<\/p>\n<ul style=\"margin-bottom: 0px\">\n<li>The password used for this SSL Certificate is well known since it is always the same&#8230; You just have to download the installer, run it and you will be able to find the password =&gt; Not really secure!<\/li>\n<li>The SSL Certificate is self-signed by Alfresco, which means that it will not be trusted in your company =&gt; SSL Warnings\/Errors<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p style=\"padding-bottom: 5px\">Based on these information, you have several choices:<\/p>\n<ul style=\"margin-bottom: 0px\">\n<li>Generate your own Self-Signed SSL Certificate with a new password that nobody knows and replace the SSL Certificate used by Alfresco by default =&gt; Secure but still a Self-Signed SSL Certificate! In addition, there are some documentation about how to do that but that&#8217;s not so easy and trivial&#8230;<\/li>\n<li>Generate your own SSL Certificate using a trusted Certificate Authority and replace the SSL Certificate used by Alfresco by default =&gt; Secure but the setup is still not so easy and trivial&#8230;<\/li>\n<li>Generate your own Self-Signed SSL Certificate and setup something in front of Alfresco to handle the SSL communications =&gt; Secure, easier but still a Self-Signed SSL Certificate!<\/li>\n<li>Generate your own SSL Certificate using a trusted Certificate Authority and setup something in front of Alfresco to handle the SSL communications =&gt; Secure, easier, trusted!<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p style=\"padding-bottom: 5px\">So yes, you already understood it I guess, I will show you in this blog how to setup the last option with\/without the SSL part. With this choice, you will have something really easy to setup because you don&#8217;t need to change anything on Alfresco side! You can let your Tomcat running on port 8080, 8443 and you just don&#8217;t care about the internal communications between the Alfresco repository and the Solr engine.\n<\/p>\n<p style=\"padding-bottom: 5px\">For this blog, I used a RedHat Enterprise Linux 6.4. If you are using a different version or a different distribution, just adapt the few steps that will not work for you (basically the &#8220;su -&#8221; or &#8220;yum&#8221; commands). In addition to that, I will define the following:<\/p>\n<ul style=\"margin-bottom: 0px\">\n<li>OS: RHEL 6.4<\/li>\n<li>Hostname: vmdevalfresco01<\/li>\n<li>Domain: your-domain.com<\/li>\n<li>SSL Certificate: *.your-domain.com\u00a0\u00a0\u00a0 (wildcard certificate =&gt; You can use something else of course!)<\/li>\n<li>Alfresco running on Apache Tomcat 7.0.68 (the version doesn&#8217;t really matter!)<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p style=\"padding: 20px 0px 0px\">\nSo let&#8217;s start this setup by switching to root for the entire installation:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">[alfresco@vmdevalfresco01 ~]$ su -\nPassword:<\/pre>\n<p style=\"padding: 20px 0px 0px\">Now we can install the Apache httpd server and setup some prerequisites:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">[root@vmdevalfresco01 ~]$ yum install httpd*\n[root@vmdevalfresco01 ~]$ yum install gcc httpd-devel mod_ssl<\/pre>\n<p style=\"padding: 20px 0px 0px\">Once Apache httpd server is installed, you have to verify that the &#8220;mod_so.c&#8221; is present in your machine. To do that, just execute the following command and ensute that it is present in the list:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">[root@vmdevalfresco01 ~]$ apachectl -l\nCompiled in modules:\n  core.c\n  prefork.c\n  http_core.c\n  mod_so.c<\/pre>\n<p style=\"padding: 20px 0px 0px\">Ok so now Apache httpd is installed (not configured) so we can download the Tomcat Connector. This little module will basically take care of all communications between the Apache httpd server and your Apache Tomcat on which Alfresco is running:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">[root@vmdevalfresco01 ~]$ cd \/tmp\n[root@vmdevalfresco01 tmp]$ wget http:\/\/archive.apache.org\/dist\/tomcat\/tomcat-connectors\/jk\/tomcat-connectors-1.2.40-src.tar.gz\n[root@vmdevalfresco01 tmp]$ tar -xvf tomcat-connectors-1.2.40-src.tar.gz\n[root@vmdevalfresco01 tmp]$ cd tomcat-connectors-1.2.40-src\/native<\/pre>\n<p style=\"padding: 20px 0px 0px\">At the moment, the source of the Tomcat Connector is on your file system but you still need to build the Apache httpd module! But before that, you will need to check where your apxs is installed (apxs = APache eXtenSion tool). You can use the which command or find it yourself:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">[root@vmdevalfresco01 native]$ which apxs\n\/usr\/sbin\/apxs\n[root@vmdevalfresco01 native]$ find \/ -name apxs\n\/usr\/sbin\/apxs<\/pre>\n<p style=\"padding: 20px 0px 0px\">Normally apxs is installed when you install the Apache httpd server but if it is not the case, then you need to install it manually. Once everything is ready, you can actually build the Tomcat Connector (of course change the path to the apxs if it differs):<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">[root@vmdevalfresco01 native]$ .\/configure --with-apxs=\/usr\/sbin\/apxs\n[root@vmdevalfresco01 native]$ make<\/pre>\n<p style=\"padding: 20px 0px 0px\">The next step is to check where your Apache httpd modules are installed (by default it is under \/usr\/lib64\/httpd\/modules but you can also use the Symlink \/etc\/httpd\/modules directly). Then copy the new Tomcat Connector module (mod_jk.so) in this Apache httpd module folder:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">[root@vmdevalfresco01 native]$ ls -l \/etc\/httpd\/\n[root@vmdevalfresco01 native]$ cp apache-2.0\/mod_jk.so \/usr\/lib64\/httpd\/modules\/<\/pre>\n<p style=\"padding: 20px 0px 0px\">Ok so the Tomcat Connector module is now in the right location but there are two remaining things to do. The first one is to configure a worker and this is done by creating a file workers.properties with the following content:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">[root@vmdevalfresco01 native]$ cd \/etc\/httpd\/\n[root@vmdevalfresco01 httpd]$ cat \/etc\/httpd\/conf.d\/workers.properties\nworker.list=worker1\nworker.worker1.type=ajp13\nworker.worker1.port=8009\nworker.worker1.host=localhost\nworker.worker1.lbfactor=1<\/pre>\n<p style=\"padding: 20px 0px 0px\">Of course for the worker to work properly, the AJP13 Connector in Tomcat must be enabled and configured to use the port 8009 (default one). The second and last thing to do for the Tomcat Connector is to actually load the module that we built into the Apache httpd server and let Apache know where the worker is defined:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">[root@vmdevalfresco01 httpd]$ cat \/etc\/httpd\/conf.d\/mod_jk.conf\nLoadModule      jk_module modules\/mod_jk.so\n\nJkWorkersFile   conf.d\/workers.properties\nJkLogFile       logs\/mod_jk_log\nJkLogLevel      info\nJkMount         \/* worker1<\/pre>\n<p style=\"padding: 20px 0px 5px 0px\">At this point, we are almost done! The next step is to actually configure your Apache httpd server as you want\/need. On the file \/etc\/httpd\/conf\/httpd.conf, you can change what you want but you will probably want to update the following values:<\/p>\n<ul style=\"margin-bottom: 0px\">\n<li>ServerTokens Prod<\/li>\n<li>KeepAlive On<\/li>\n<li>Listen 80<\/li>\n<li>Include conf.d\/*.conf<\/li>\n<li>User apache<\/li>\n<li>Group apache<\/li>\n<li>ServerAdmin firstname.lastname@your-domain.com<\/li>\n<li>ServerName vmdevalfresco01.your-domain.com:80<\/li>\n<li>ServerSignature Off<\/li>\n<li>aso&#8230;<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h3>I. First solution &#8211; Apache httpd server in HTTP<\/h3>\n<p style=\"padding: 20px 0px 0px\">Now comes the time to configure your Apache httpd server to work in combination of Alfresco. If you want to use Apache in HTTP (I really recommend you to set it up in HTTPS&#8230;), you just have to add the following lines at the end of the file \/etc\/httpd\/conf\/httpd.conf (or create a conf file in the conf.d folder):<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">[root@vmdevalfresco01 httpd]$ tail -10 \/etc\/httpd\/conf\/httpd.conf\n&lt;VirtualHost *:80&gt;\n    ServerName vmdevalfresco01.your-domain.com\n    ServerAlias vmdevalfresco01 vmdevalfresco01.your-domain.com\n    RewriteLog \/var\/log\/httpd\/vmdevalfresco01.log\n    RewriteLogLevel 5\n    RewriteEngine On\n    RewriteRule ^\/$ http:\/\/vmdevalfresco01.your-domain.com\/share [R,L]\n    JkMount \/* worker1\n&lt;\/VirtualHost&gt;<\/pre>\n<p style=\"padding: 20px 0px 0px\">These few lines will basically redirect all requests for &#8220;http:\/\/vmdevalfresco01.your-domain.com&#8221; to &#8220;http:\/\/vmdevalfresco01.your-domain.com\/share&#8221;. It is a simple redirection but then Alfresco will be able to catch it because by default Alfresco isn&#8217;t using the context &#8220;\/&#8221; but is using &#8220;\/share&#8221; (or &#8220;\/alfresco&#8221;). In addition to that, there is also the definition of a Worker for our mod_jk and this is what will actually do the communications between the Apache httpd server and your Apache Tomcat. With this configuration, you can now start your Apache httpd server:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">[root@vmdevalfresco01 httpd]$ service httpd start<\/pre>\n<p style=\"padding: 0px\">&nbsp;<\/p>\n<p style=\"padding: 0px 0px 0px\">You can now access &#8220;http:\/\/vmdevalfresco01.your-domain.com&#8221; and it will in the background use your Apache Tomcat defined in the port 8080 (or any other ports) without showing it to the end users.<\/p>\n<p>&nbsp;<\/p>\n<h3>II. Second solution &#8211; Apache httpd server in HTTPS<\/h3>\n<p style=\"padding: 20px 0px 0px\">If you want to use Apache httpd server in HTTPS which is the recommended way to go, it will requires a little bit more configuration. The first thing to do is to redirect all HTTP communications to HTTPS. For that purpose, add the following lines at the end of the file \/etc\/httpd\/conf\/httpd.conf (or create a conf file in the conf.d folder) as done for the HTTP part but the RewriteRules are different:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">[root@vmdevalfresco01 httpd]$ tail -11 \/etc\/httpd\/conf\/httpd.conf\n&lt;VirtualHost *:80&gt;\n    ServerName vmdevalfresco01.your-domain.com\n    ServerAlias vmdevalfresco01 vmdevalfresco01.your-domain.com\n    RewriteLog \/var\/log\/httpd\/vmdevalfresco01.log\n    RewriteLogLevel 5\n    RewriteEngine On\n    RewriteRule ^\/$ https:\/\/vmdevalfresco01.your-domain.com\/share [R,L]\n    RewriteRule ^\/?(.*) https:\/\/vmdevalfresco01.your-domain.com\/$1 [R,L]\n    JkMount \/* worker1\n&lt;\/VirtualHost&gt;<\/pre>\n<p style=\"padding: 20px 0px 0px\">As you can see above, the main difference with the configuration done for the HTTP setup is that there are two rewrite rules now and both are redirecting to the HTTPS URL. In addition to that, you will also have to edit the file \/etc\/httpd\/conf.d\/ssl.conf which has been created with a default content when installing the module mod_ssl. You can setup the following content:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">[root@vmdevalfresco01 httpd]$ cat \/etc\/httpd\/conf.d\/ssl.conf\nLoadModule ssl_module modules\/mod_ssl.so\n\nListen 443\n\nSSLPassPhraseDialog  builtin\n\nSSLSessionCache         shmcb:\/var\/cache\/mod_ssl\/scache(512000)\nSSLSessionCacheTimeout  300\n\nSSLMutex default\n\nSSLRandomSeed startup file:\/dev\/urandom  256\nSSLRandomSeed connect builtin\n\nSSLCryptoDevice builtin\n\n&lt;VirtualHost *:443&gt;\n    ServerName vmdevalfresco01.your-domain.com\n    ServerAlias vmdevalfresco01 vmdevalfresco01.your-domain.com\n    ErrorLog logs\/ssl_error_log\n    TransferLog logs\/ssl_access_log\n    LogLevel warn\n\n    RewriteLog \/var\/log\/httpd\/vmdevalfresco01-ssl.log\n    RewriteLogLevel 5\n    RewriteEngine On\n    RewriteRule ^\/$ https:\/\/vmdevalfresco01.your-domain.com\/share [R,L]\n    JkMount \/* worker1\n\n    SSLEngine on\n    SSLProtocol All -SSLv2 -SSLv3\n    SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:AES256+RSA\n    SSLHonorCipherOrder on\n    SSLCertificateFile \/etc\/pki\/tls\/certs\/wildcard_your-domain_com.crt\n    SSLCertificateKeyFile \/etc\/pki\/tls\/private\/wildcard_your-domain_com.key\n    SSLCertificateChainFile \/etc\/pki\/tls\/certs\/gd_bundle-g2-g1.crt\n\n    &lt;Files ~ \".(cgi|shtml|phtml|php3?)$\"&gt;\n        SSLOptions +StdEnvVars\n    &lt;\/Files&gt;\n    &lt;Directory \"\/var\/www\/cgi-bin\"&gt;\n        SSLOptions +StdEnvVars\n    &lt;\/Directory&gt;\n    SetEnvIf User-Agent \".*MSIE.*\" \n    nokeepalive ssl-unclean-shutdown \n    downgrade-1.0 force-response-1.0\n    CustomLog logs\/ssl_request_log \n    \"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b\"\n&lt;\/VirtualHost&gt;<\/pre>\n<p style=\"padding: 0px\">&nbsp;<\/p>\n<p style=\"padding-bottom: 5px\">Some notes about the configuration setup in the file ssl.conf:<\/p>\n<ul style=\"margin-bottom: 0px\">\n<li>SSLProtocol = All weak SSL Protocols (SSLv2 and SSLv3) have been deactivated.<\/li>\n<li>SSLCipherSuite = Only a specific list of Ciphers has been setup and therefore only communications with these Ciphers will be enabled. That way, we are sure that a hacker will not be able to use weak encryption mechanisms.<\/li>\n<li>SSLCertificateFile = This is the SSL Certificate that Apache httpd will use.<\/li>\n<li>SSLCertificateKeyFile = This is the Private Key used to generate the SSL Certificate.<\/li>\n<li>SSLCertificateChainFile = This is the SSL Certificate Trusted Chain. In case you have a Root CA and a Gold CA, then this file should contain the complete chain that will ensure the SSL Certificate to be trusted. This is usually provided by your Certificate Authority.<\/li>\n<\/ul>\n<p style=\"padding: 0px\">&nbsp;<\/p>\n<p style=\"padding: 0px 0px 0px\">With this configuration, all HTTP and HTTPS communications will be redirected to HTTPS only (&#8220;http:\/\/vmdevalfresco01.your-domain.com\/share&#8221;). In addition to that, everything said for the HTTP also apply for the HTTPS setup. Once this is done and everything is in place, you can now start your Apache httpd server:<\/p>\n<pre class=\"brush: bash; gutter: true; first-line: 1\">[root@vmdevalfresco01 httpd]# service httpd start<\/pre>\n<p style=\"padding: 0px\">&nbsp;<\/p>\n<p style=\"padding: 0px\">You can now access &#8220;http:\/\/vmdevalfresco01.your-domain.com&#8221; or &#8220;https:\/\/vmdevalfresco01.your-domain.com&#8221; or &#8220;https:\/\/vmdevalfresco01.your-domain.com\/share&#8221; and the Apache httpd server will redirect everything to HTTPS and use in the background use your Apache Tomcat defined in the port 8080 (or any other ports) without showing it to the end users.<\/p>\n<p>And that&#8217;s it!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In this blog, I will talk about the setup of an Apache httpd server with\/without SSL configuration on top of your Alfresco installation. This way of configuring Apache httpd in front of your Web Application can be reused very easily for all other applications like your intranet, competency center, resource planning, aso&#8230; It is NOT [&hellip;]<\/p>\n","protected":false},"author":20,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[197],"tags":[3169,839,382],"type_dbi":[],"class_list":["post-8060","post","type-post","status-publish","format-standard","hentry","category-application-integration-middleware","tag-alfresco","tag-apache","tag-ssl"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.2 (Yoast SEO v27.2) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Alfresco - Protect your installation with Apache httpd - dbi Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Alfresco - Protect your installation with Apache httpd\" \/>\n<meta property=\"og:description\" content=\"In this blog, I will talk about the setup of an Apache httpd server with\/without SSL configuration on top of your Alfresco installation. This way of configuring Apache httpd in front of your Web Application can be reused very easily for all other applications like your intranet, competency center, resource planning, aso&#8230; It is NOT [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi Blog\" \/>\n<meta property=\"article:published_time\" content=\"2016-05-25T13:28:54+00:00\" \/>\n<meta name=\"author\" content=\"Morgan Patou\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@MorganPatou\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Morgan Patou\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/\"},\"author\":{\"name\":\"Morgan Patou\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/c4d05b25843a9bc2ab20415dae6bd2d8\"},\"headline\":\"Alfresco &#8211; Protect your installation with Apache httpd\",\"datePublished\":\"2016-05-25T13:28:54+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/\"},\"wordCount\":1508,\"commentCount\":0,\"keywords\":[\"Alfresco\",\"Apache\",\"SSL\"],\"articleSection\":[\"Application integration &amp; Middleware\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/\",\"name\":\"Alfresco - Protect your installation with Apache httpd - dbi Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\"},\"datePublished\":\"2016-05-25T13:28:54+00:00\",\"author\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/c4d05b25843a9bc2ab20415dae6bd2d8\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.dbi-services.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Alfresco &#8211; Protect your installation with Apache httpd\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/\",\"name\":\"dbi Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/c4d05b25843a9bc2ab20415dae6bd2d8\",\"name\":\"Morgan Patou\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g\",\"caption\":\"Morgan Patou\"},\"description\":\"Morgan Patou has over 12 years of experience in Enterprise Content Management (ECM) systems, with a strong focus in recent years on platforms such as Alfresco, Documentum, and M-Files. He specializes in the architecture, setup, customization, and maintenance of ECM infrastructures in complex &amp; critical environments. Morgan is well-versed in both engineering and operations aspects, including high availability design, system integration, and lifecycle management. He also has a solid foundation in open-source and proprietary technologies - ranging from Apache, OpenLDAP or Kerberos to enterprise-grade systems like WebLogic. Morgan Patou holds an Engineering Degree in Computer Science from ENSISA (\u00c9cole Nationale Sup\u00e9rieure d'Ing\u00e9nieurs Sud Alsace) in Mulhouse, France. He is Alfresco Content Services Certified Administrator (ACSCA), Alfresco Content Services Certified Engineer (ACSCE) as well as OpenText Documentum Certified Administrator. His industry experience spans the Public Sector, IT Services, Financial Services\/Banking, and the Pharmaceutical industry.\",\"sameAs\":[\"https:\/\/blog.dbi-services.com\/author\/morgan-patou\/\",\"https:\/\/x.com\/MorganPatou\"],\"url\":\"https:\/\/www.dbi-services.com\/blog\/author\/morgan-patou\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Alfresco - Protect your installation with Apache httpd - dbi Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/","og_locale":"en_US","og_type":"article","og_title":"Alfresco - Protect your installation with Apache httpd","og_description":"In this blog, I will talk about the setup of an Apache httpd server with\/without SSL configuration on top of your Alfresco installation. This way of configuring Apache httpd in front of your Web Application can be reused very easily for all other applications like your intranet, competency center, resource planning, aso&#8230; It is NOT [&hellip;]","og_url":"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/","og_site_name":"dbi Blog","article_published_time":"2016-05-25T13:28:54+00:00","author":"Morgan Patou","twitter_card":"summary_large_image","twitter_creator":"@MorganPatou","twitter_misc":{"Written by":"Morgan Patou","Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/"},"author":{"name":"Morgan Patou","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/c4d05b25843a9bc2ab20415dae6bd2d8"},"headline":"Alfresco &#8211; Protect your installation with Apache httpd","datePublished":"2016-05-25T13:28:54+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/"},"wordCount":1508,"commentCount":0,"keywords":["Alfresco","Apache","SSL"],"articleSection":["Application integration &amp; Middleware"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/","url":"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/","name":"Alfresco - Protect your installation with Apache httpd - dbi Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"datePublished":"2016-05-25T13:28:54+00:00","author":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/c4d05b25843a9bc2ab20415dae6bd2d8"},"breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/alfresco-protect-your-installation-with-apache-httpd\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Alfresco &#8211; Protect your installation with Apache httpd"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/c4d05b25843a9bc2ab20415dae6bd2d8","name":"Morgan Patou","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g","caption":"Morgan Patou"},"description":"Morgan Patou has over 12 years of experience in Enterprise Content Management (ECM) systems, with a strong focus in recent years on platforms such as Alfresco, Documentum, and M-Files. He specializes in the architecture, setup, customization, and maintenance of ECM infrastructures in complex &amp; critical environments. Morgan is well-versed in both engineering and operations aspects, including high availability design, system integration, and lifecycle management. He also has a solid foundation in open-source and proprietary technologies - ranging from Apache, OpenLDAP or Kerberos to enterprise-grade systems like WebLogic. Morgan Patou holds an Engineering Degree in Computer Science from ENSISA (\u00c9cole Nationale Sup\u00e9rieure d'Ing\u00e9nieurs Sud Alsace) in Mulhouse, France. He is Alfresco Content Services Certified Administrator (ACSCA), Alfresco Content Services Certified Engineer (ACSCE) as well as OpenText Documentum Certified Administrator. His industry experience spans the Public Sector, IT Services, Financial Services\/Banking, and the Pharmaceutical industry.","sameAs":["https:\/\/blog.dbi-services.com\/author\/morgan-patou\/","https:\/\/x.com\/MorganPatou"],"url":"https:\/\/www.dbi-services.com\/blog\/author\/morgan-patou\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/8060","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=8060"}],"version-history":[{"count":0,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/8060\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=8060"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=8060"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=8060"},{"taxonomy":"type","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/type_dbi?post=8060"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}