Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[MNT-24158] Update Tomcat 10 Configuration for ACS 23.x #1591

Merged
merged 6 commits into from
Nov 6, 2024
Merged

[MNT-24158] Update Tomcat 10 Configuration for ACS 23.x #1591

Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
ce92fe2
[MNT-24158] Update Tomcat 10 Configuration for ACS 23.x
mbujak-hyland Oct 18, 2024
76649d9
[MNT-24158] Minor fix
mbujak-hyland Oct 18, 2024
de2eda1
[MNT-24158] Minor fix
mbujak-hyland Oct 18, 2024
ca4003b
Minor fix
mbujak-hyland Oct 31, 2024
e964c93
Minor fix
mbujak-hyland Oct 31, 2024
e9e6ff2
Minor fix
mbujak-hyland Nov 5, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
32 changes: 23 additions & 9 deletions content-services/latest/install/zip/tomcat.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -81,18 +81,32 @@ The installation directory for Tomcat is represented as `<TOMCAT_HOME>`.
2. Add the following connector:

```xml
<Connector port="8443" protocol="HTTP/1.1"
SSLEnabled="true" maxThreads="150" scheme="https"
keystoreFile="xxxxx"
keystorePass="password" keystoreType="JCEKS"
secure="true" connectionTimeout="240000"
truststoreFile="xxxxx"
truststorePass="password" truststoreType="JCEKS"
clientAuth="want" sslProtocol="TLS" />
<Connector port="8443"
protocol="org.apache.coyote.http11.Http11NioProtocol"
connectionTimeout="20000"
maxThreads="150"
SSLEnabled="true"
scheme="https"
secure="true"
defaultSSLHostConfigName="localhost">
<SSLHostConfig hostName="localhost"
protocols="TLSv1.2"
certificateVerification="required"
truststoreFile="/usr/local/tomcat/alf_data/keystore/ssl.truststore"
truststorePassword="truststore"
truststoreType="JCEKS">
<Certificate certificateKeystoreFile="/usr/local/tomcat/alf_data/keystore/ssl.keystore"
certificateKeyAlias="ssl.repo"
type="RSA"
certificateKeystorePassword="keystore"
certificateKeystoreType="JCEKS"/>
</SSLHostConfig>
</Connector>
```

When configuring the Tomcat connector, consider the following:

* The keystore and truststore file locations in the above example will be created later, when you install and configure Alfresco Search Services.
* The keystore and truststore files have to be generated to ensure the best security level when installing Alfresco Search Services. You can choose the location of your choice. By default, they are stored either in the Tomcat installation directory or in the `alf_data` directory. For more information, see [Alfresco Search Services secure keys generation]({%link search-services/latest/config/keys.md %}#set-up-certificates).

* If you're using a different keystore or truststore type other than the default, `JCEKS`, you must change the value in the properties file.

Expand Down