Merge branch 'feature/SEARCH-1656_SSLByDefault' into 'master'

Improving documentation from review comments.

See merge request search_discovery/insightengine!22
This commit is contained in:
Angel Borroy
2019-06-19 14:33:43 +01:00

View File

@@ -36,7 +36,7 @@ $ unzip alfresco-search-services-*.zip
$ cd alfresco-search-services
```
From Alfresco *Search Services 1.3.0.3*, distribution ZIP is released with Mutual Authentication TLS (SSL) by default. So before starting the service, generating secure keys for SSL communication is required. You can find detailed information for this step at [Alfresco documentation](https://docs.alfresco.com/search-enterprise/tasks/generate-keys-ssl.html).
From Alfresco *Search Services 1.3.0.5*, distribution ZIP is released with Mutual Authentication TLS (SSL) by default. So before starting the service, generating secure keys for SSL communication is required. You can find detailed information for this step at [Alfresco documentation](https://docs.alfresco.com/search-enterprise/tasks/generate-keys-ssl.html).
The `keystores` folder generated by the SSL Tool contains the keystores and truststores for SSL configuration. In the following steps, it's assumed that SSL Tool has been executed from `/tmp` or `C:\tmp` folder.
@@ -113,7 +113,7 @@ SOLR Web Console will be available at:
[https://localhost:8983/solr](https://localhost:8983/solr)
**Note** Client certificate `browser.p12`, generated by the SSL Tool, is required to be installed in your browser in order to access to this Web Console.
**Note** Client certificate `browser.p12`, generated by the SSL Tool, is required to be installed in your browser in order to access to this Web Console. See "Installing Browser certificate" section below.
By default Alfresco Search Services runs on port 8983, but this can be set by supplying e.g. `-p 8083` to the "solr start" command.
@@ -179,6 +179,27 @@ SOLR Web Console will be available at:
[http://localhost:8983/solr](http://localhost:8983/solr)
### Installing Browser certificate
In order to access to SOLR Web Console, available by default at [https://localhost:8983/solr](https://localhost:8983/solr), browser certificate must be installed in your machine.
For *Windows* systems, `client\browser.p12` file must be imported as new private certificate to `Windows Certificates` application.
For *Mac OS X* systems, `client/browser.p12` file must be imported to `Keychain Access` application.
Also setting the right options in these application to *trust* in this certificate is required.
Once the certificate is installed, the following message should be showed by your browser when accessing to Solr Web Console:
```
Your connection is not private
Attackers might be trying to steal your information from localhost (for example, passwords, messages or credit cards). Learn more
NET::ERR_CERT_AUTHORITY_INVALID
```
As the certificate has been generated for `localhost`, this warning is expected. Just click on `Advanced >> Proceed` and use your browser certificate to access Solr Web Console.
### Use Alfresco Search Services Docker Image
Once the project has been built, the Docker image can be also built: