Portal for ArcGIS does not display an error when setting a Root or Intermediate Secure Socket Layer (SSL) Certificate as the portal's web server SSL Certificate.
上次发布: March 10, 2017Portal for ArcGIS
漏洞 ID 编号
BUG-000097775
已提交
July 14, 2016
上次修改时间
June 5, 2024
适用范围
Portal for ArcGIS
找到的版本
10.4.1
操作系统
Windows OS
操作系统版本
2012 R2
修正版本
10.5.1
状态
Fixed
此漏洞已得到修复。 有关详细信息,请参阅“版本修复”和“其他信息”(如果适用)。
解决办法
Warning: This will only work if you still have the default self-signed portal certificate installed in the portal's keystore. If not, please contact Esri Technical Support.
1) Stop the portal windows service.
2) Open this file in a text editor.
"<portal installation location>\Portal\framework\runtime\tomcat\conf\server.xml"
3) Search for this block of XML:
<Connector SSLEnabled="true" URIEncoding="UTF-8" clientAuth="false" connectionTimeout="20000" connectionUploadTimeout="3600000" disableUploadTimeout="false" keyAlias="BAD CERTIFICATE NAME HERE" keystoreFile="../../../etc/ssl/portal.ks" keystorePass="portal.secret" maxHttpHeaderSize="65535" maxPostSize="10485760" maxThreads="150" port="7443" protocol="HTTP/1.1" scheme="https" secure="true" sslEnabledProtocols="TLSv1.2,TLSv1.1,TLSv1" sslProtocol="TLS"/>
4) replace the keyAlias section. It will now look like this:
<Connector SSLEnabled="true" URIEncoding="UTF-8" clientAuth="false" connectionTimeout="20000" connectionUploadTimeout="3600000" disableUploadTimeout="false" keyAlias="portal" keystoreFile="../../../etc/ssl/portal.ks" keystorePass="portal.secret" maxHttpHeaderSize="65535" maxPostSize="10485760" maxThreads="150" port="7443" protocol="HTTP/1.1" scheme="https" secure="true" sslEnabledProtocols="TLSv1.2,TLSv1.1,TLSv1" sslProtocol="TLS"/>
5) Start the portal windows service.