AnsweredAssumed Answered

file upload with simple HTML form via SSL

Question asked by pre on Oct 22, 2011
I changed to Apache Proxy (mod_jk), with tomcat connected as container (AJP-Protocol) and SSL running by Apache (mod_ssl).
The Flush Uploader is not working (see forum - SSL bug), so I switched it off and use the simple HTML form for single file uploads.
Unfortunately it does not work. For test reasons I stepped back to tomcat's HTML-Connector port 8080. Here I can upload single files with no problem,
so I'm sure that the single HTML-File upload is working.

With Apache Proxy and SSL I have access to the alfresco share repository, but I get following errors by uploading files:

[error] [client x.x.x.x] Re-negotiation handshake failed: Not accepted by client!?, referer: https://y.y.y.y/share/page/folder-details?nodeRef=workspace://SpacesStore/00dad736-8eec-4806-8cd2-db6ab3ed1d19
[error] [client x.x.x.x] File does not exist: /srv/tomcat6/webapps/share/res, referer: https://y.y.y.y/share/page/folder-details?nodeRef=workspace://SpacesStore/00dad736-8eec-4806-8cd2-db6ab3ed1d19

The first error you can solve by adding "SSLInsecureRenegotiation on" to the httpd.conf. As additional information : Using the Alfresco WebDAV-Server, uploads are possible.

Here parts of my Virtual Host configuration:

<VirtualHost _default_:443>

        SSLInsecureRenegotiation on
        DocumentRoot "/srv/tomcat6/webapps"

       <Location />
         SSLRequireSSL On
         SSLVerifyClient optional
         SSLVerifyDepth 1
         SSLRenegBufferSize 10486000
         SSLOptions +StdEnvVars +StrictRequire +OptRenegotiate
        </Location>

        <Directory "/srv/tomcat6/webapps">
                Options Indexes FollowSymLinks
                AllowOverride all
                Order allow,deny
                Allow from all
        </Directory>
       # tomcat mounts (for mod_jk)
        Alias /examples "/srv/tomcat6/webapps/examples"
        Alias /alfresco "/srv/tomcat6/webapps/alfresco"
        Alias /share "/srv/tomcat6//webapps/share"
        # Send everything for context /examples to worker named ajp13 (ajp13)
        #
        JkMount /examples/*  alfrescoworker
        JkMount /alfresco/*  alfrescoworker
        JkMount /share/*  alfrescoworker
        # You can explicitly unmount part of the mounted tree
        # Unmounted stuff goes via apache.
        # Serve html, jpg and gif using httpd
        JkUnMount /examples/*.html alfrescoworker
        JkUnMount /examples/*.jpg  alfrescoworker
        JkUnMount /examples/*.gif  alfrescoworker

        JkUnMount /alfresco/*.html  alfrescoworker
        JkUnMount /alfresco/*.jpg  alfrescoworker
        JkUnMount /alfresco/*.gif  alfrescoworker
        JkUnMount /share/*.html  alfrescoworker
        JkUnMount /share/*.jpg  alfrescoworker
        JkUnMount /share/*.gif  alfrescoworker
</VirtualHost>

If necessary I can provide more configuration details. Do I need besides the normal alfresco worker configuration some more Apache parameters?

Thanks for help!

Outcomes