SSL connection to alfresco 7.4.2.1 and transform AIO

[flashboss]

We are using the generated tengineAIO.keystore and tengineAIO.truststore files and we have placed them in the appropriate folder.

Actually we start the transform core AIO through the command:

nohup java \
  -DPDFRENDERER_EXE="${PDF_RENDERER}" \
  -DLIBREOFFICE_HOME="/usr/lib64/libreoffice" \
  -DIMAGEMAGICK_ROOT="${MAGICK_DIR}" \
  -DIMAGEMAGICK_DYN="${MAGICK_DIR}/MagickWand/.libs" \
  -DIMAGEMAGICK_EXE="${MAGICK_DIR}/utilities/magick" \
  -DACTIVEMQ_URL="failover:(tcp://*****:61616)?timeout=3000" \
  -DFILE_STORE_URL="https://********:8099/alfresco/api/-default-/private/sfs/versions/1/file" \
  -Dserver.ssl.enabled=true \
  -Djavax.net.ssl.trustStore=${KEYSTORE_DIR}/tengineAIO.truststore \
  -Djavax.net.ssl.trustStorePassword=******* -Djavax.net.ssl.trustStoreType=JCEKS \
  -Dserver.ssl.key-store=${KEYSTORE_DIR}/tengineAIO.keystore \
  -Dserver.ssl.key-store-password=******** -Dserver.ssl.key-store-type=JCEKS \
  -jar "${TRANSFORMER_DIR}/alfresco-transform-core-aio-5.1.7-A.3.jar" \
  > "${LOG_DIR}/transform-core.log" 2>&1 &
echo $! > "${PID_DIR}/transform-core.pid"

and alfresco content services is configured through alfresco-global.properties so:

dir.keystore=${dir.root}/keystore
keystore.storepassword=*******
localTransform.core-aio.url=https://*****:8090/

We have this error in the alfresco.log file of alfresco content services:

2025-06-11T12:29:10,069 [] ERROR [repo.rendition2.RemoteTransformServiceRegistry] [QuartzScheduler_Worker-1] 05110073 Failed to connect or to read the response from T-Router on https://*******:8095//transform/config?configVersion=2 . Need another configuration?

[aborroy]

What is the configuration of your T-Router?

You should be using something similar to the Transform Core AIO:

# example
java \
  -Dserver.ssl.enabled=true \
  -Dserver.ssl.key-store=${KEYSTORE_DIR}/tengineAIO.keystore \
  -Dserver.ssl.key-store-password=****** \
  -Dserver.ssl.key-store-type=JCEKS \
  -Djavax.net.ssl.trustStore=${KEYSTORE_DIR}/tengineAIO.truststore \
  -Djavax.net.ssl.trustStorePassword=****** \
  -jar alfresco-transform-router-<version>.jar \
  >${LOG_DIR}/transform-router.log 2>&1 &

And for alfresco-global.properties:

transform.service.enabled=true
transform.service.url=https://******:8095
sfs.url=https://******:8099

Note For Community configuration for TLS is available in https://github.com/aborroy/alfresco-secure-connection.

[flashboss]

Hi here, my transform router configuration:

nohup java \
  -Dserver.ssl.enabled=true \
  -Djavax.net.ssl.trustStore=${KEYSTORE_DIR}/transformRouter.truststore \
  -Djavax.net.ssl.trustStorePassword=********** -Djavax.net.ssl.trustStoreType=JCEKS \
  -Dserver.ssl.key-store=${KEYSTORE_DIR}/transformRouter.keystore \
  -Dserver.ssl.key-store-password=******* -Dserver.ssl.key-store-type=JCEKS \
  -DCORE_AIO_QUEUE="org.alfresco.transform.engine.aio.acs" \
  -DCORE_AIO_URL="https://10.203.185.93:8090" \
  -DACTIVEMQ_URL="failover:(tcp://******:61616)?timeout=3000" \
  -DFILE_STORE_URL="https://*********:8099/alfresco/api/-default-/private/sfs/versions/1/file" \
  -jar "${TRANSFORMER_DIR}/alfresco-transform-router-4.1.7.jar" \
  > "${LOG_DIR}/transform-router.log" 2>&1 &
echo $! > "${PID_DIR}/transform-router.pid"

and alfresco-global.properties:

transform.service.enabled=true
transform.service.url=https://******:8095
sfs.url=https://******:8099

[aborroy]

According to the error, the cause of the exception should be logged:

https://github.com/Alfresco/alfresco-community-repo/blob/8a64d9fb0b52b23b23a3e7d14db7064f4789be87/repository/src/main/java/org/alfresco/transform/registry/CombinedConfig.java#L168

Do you have additional stack trace?

It seems that the error is not related to the mTLS configuration at all.