Re: Server Name Identification (SNI) configuration Tomcat 8.5.23
On Tue, Feb 12, 2019 at 11:37 AM Herb Burnswell wrote: > > > On Tue, Feb 12, 2019 at 11:26 AM Mark Thomas wrote: > >> On 12/02/2019 19:21, Herb Burnswell wrote: >> > All, >> > >> > Tomcat: 8.5.23 >> > OS: RHEL 7.5 >> > >> > I am attempting to set up Tomcat to use two keystore's with SNI. Tomcat >> > starts successfully but but I receive a timeout when trying to access >> > either of the defined server names. >> >> >> >> > As mentioned, Tomcat start successfully, but the sites time out. There >> is >> > nothing in the logs that indicate a request is even made. >> > >> > Am I missing something in this configuration? Any guidance is greatly >> > appreciated. >> >> What do the logs say when Tomcat starts with the non-working >> configuration? >> >> Mark >> >> - >> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >> For additional commands, e-mail: users-h...@tomcat.apache.org >> >> > > Thanks for the reply Mark. Unfortunately there no extra information in > the logs from the non-working configuration. It appears that everything > starts successfully with working and non-working configuration. > > As mentioned, the timeout attempting to connect to the SNI domains does > not register in the logs either. > > HB > Damn, my bad. I figured it out. Embarrassingly, I had an incorrect password for one of the keystores. I was focusing so much on the configuration parameters I overlooked the simple part. Thanks, HB
Re: Server Name Identification (SNI) configuration Tomcat 8.5.23
On Tue, Feb 12, 2019 at 11:26 AM Mark Thomas wrote: > On 12/02/2019 19:21, Herb Burnswell wrote: > > All, > > > > Tomcat: 8.5.23 > > OS: RHEL 7.5 > > > > I am attempting to set up Tomcat to use two keystore's with SNI. Tomcat > > starts successfully but but I receive a timeout when trying to access > > either of the defined server names. > > > > > As mentioned, Tomcat start successfully, but the sites time out. There > is > > nothing in the logs that indicate a request is even made. > > > > Am I missing something in this configuration? Any guidance is greatly > > appreciated. > > What do the logs say when Tomcat starts with the non-working configuration? > > Mark > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > > Thanks for the reply Mark. Unfortunately there no extra information in the logs from the non-working configuration. It appears that everything starts successfully with working and non-working configuration. As mentioned, the timeout attempting to connect to the SNI domains does not register in the logs either. HB
Re: Server Name Identification (SNI) configuration Tomcat 8.5.23
On 12/02/2019 19:21, Herb Burnswell wrote: > All, > > Tomcat: 8.5.23 > OS: RHEL 7.5 > > I am attempting to set up Tomcat to use two keystore's with SNI. Tomcat > starts successfully but but I receive a timeout when trying to access > either of the defined server names. > As mentioned, Tomcat start successfully, but the sites time out. There is > nothing in the logs that indicate a request is even made. > > Am I missing something in this configuration? Any guidance is greatly > appreciated. What do the logs say when Tomcat starts with the non-working configuration? Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Server Name Identification (SNI) configuration Tomcat 8.5.23
All, Tomcat: 8.5.23 OS: RHEL 7.5 I am attempting to set up Tomcat to use two keystore's with SNI. Tomcat starts successfully but but I receive a timeout when trying to access either of the defined server names. Here is a single server name configuration that works successfully: Here is the SNI configuration that I'm trying: As mentioned, Tomcat start successfully, but the sites time out. There is nothing in the logs that indicate a request is even made. Am I missing something in this configuration? Any guidance is greatly appreciated. Best, HB