Using SSL to secure the connection between Enterprise Server and Drupal

Securing the connection between Enterprise Server and Drupal can be achieved by running Drupal on HTTPS.

Step 1. This step is optional, only perform it when the following is not true:

• Enterprise Server and Drupal run on the same machine and SSL is set up for Enterprise Server
• You are happy to reuse the same certificate for Drupal

Repeat the steps from Using SSL in Enterprise Server but now for the Drupal server.

Notes: For Drupal 6 and 7: You can choose whether or not to generate the cacert.pem file but if you do, and there is already one installed or used on <web_root>/Enterprise/config/encryptkeys/cacert.pem, you should not overwrite this file. Instead, create another file (for instance cacert_drupal.pem) and adjust the "local_cert" option (in the DRUPAL_SITES setting in the config_drupal.php file) to point to your Drupal certificate. For Drupal 8: Enter the path to the certificate on the Publication Channel Maintenance page. The your_server_name placeholder must be replaced with the machine name on which Drupal runs.

Tip: You can configure Drupal on the same machine but on a different port (such as '1234'), thereby enabling you to specify a different certificate than used for Enterprise Server.

Step 2. Set up the Drupal configuration while making sure of the following:

• In the config_drupal.php file, fill in the HTTPS location of Drupal in the "url" option of the following setting:
• For Drupal 6 and 7: DRUPAL_SITES
• For Drupal 8: DRUPAL8_SITES

• Use the machine name as specified while creating the certificates:

'url' => 'https://your_server_name:443/drupal/'

Step 3. Run the Publish to Drupal test on the Heath Check page. Fix any errors where necessary.

Troubleshooting: Publish error from Drupal

When the certificate does not match, the following type of error is shown:

Drupal - Publish error from Drupal: Error in cURL request: SSL certificate problem, verify that the CA cert is OK. Details: error:1407E086:SSL routines:SSL2_SET_CERTIFICATE:certificate verify failed.

Fix this by checking the following:

• For Drupal 6 and 7: Your "local_cert" option in the DRUPAL_SITES setting of the config_drupal.php file.
• For Drupal 8: The path to the certificate.