Which version of Java?
(Make sure you are running the latest JVM, as that's a requirement for
SSL/TLS.  Pay attention to the JVM release notes and follow the JVM
expiration notices!)

What are the security details of ducc.crt?
(DSA? RSA? what bitlength? What type of certificate? does your start.ini
configuration indicate this type if nor jks?  -
hint, DSA is a no-go anymore, and a bitlength under 2048 will fail too)


Joakim Erdfelt / [email protected]

On Fri, Feb 24, 2017 at 6:49 AM, Lou DeGenaro <[email protected]>
wrote:

> 2017-02-24 08:05:25.900:INFO:oejs.Server:main: jetty-9.4.2.v20170220
>
> I created a folder for my webapp called "test" and put my "Hello World"
> index.html in it.  http serves it just fine, thank you.  https no so much.
>
> Chromium says: ERR_SSL_VERSION_OR_CIPHER_MISMATCH
> FireFox says:  SSL_ERROR_NO_CYPHER_OVERLAP
>
> I created the keystore like so:
>
> keytool -keystore keystore -import -alias jetty -file ducc.crt
>
> I edited the start.ini file with the keystore password for both jetty.
> keystore.password and jetty.truststore.password.
>
> I've made no other changes to the jetty that I downloaded.
>
> I'm a bit out of my comfort zone here, so it's likely that I'm doing
> something wrong.  Please advise.
>
> Thanks.
>
> Lou.
>
> _______________________________________________
> jetty-users mailing list
> [email protected]
> To change your delivery options, retrieve your password, or unsubscribe
> from this list, visit
> https://dev.eclipse.org/mailman/listinfo/jetty-users
>
_______________________________________________
jetty-users mailing list
[email protected]
To change your delivery options, retrieve your password, or unsubscribe from 
this list, visit
https://dev.eclipse.org/mailman/listinfo/jetty-users

Reply via email to