From Alfresco 7.4 communication with Transform Service and Transform Core AIO can be established using mTLS, as described in official documentation https://docs.alfresco.com/content-services/latest/config/mtls/
In order to support this feature, Alfresco SSL Generator tool has been modified to allow keystore generation process.
A practical application for this principle is available in https://github.com/aborroy/alfresco-secure-connection
This project configures following protocols and communications:
- TLS with encrypted credentials from Repository JDBC to Database (Postgres)
- mTLS between Repository and Transform Core AIO
- mTLS between Repository and Search Services
- TLS with encrypted credentials from Repository to ActiveMQ
- TLS to provide HTTPs for external services via Web Proxy
Additional information
Detailed instructions for Transform Services 4.0.0 are available in https://www.slideshare.net/angelborroy/alfresco-transform-services-400
Video recording
Step by step video recording is available.