Re: Server Name Identification (SNI) configuration Tomcat 8.5.23

2019-02-12 Thread Herb Burnswell
On Tue, Feb 12, 2019 at 11:37 AM Herb Burnswell 
wrote:

>
>
> On Tue, Feb 12, 2019 at 11:26 AM Mark Thomas  wrote:
>
>> On 12/02/2019 19:21, Herb Burnswell wrote:
>> > All,
>> >
>> > Tomcat: 8.5.23
>> > OS: RHEL 7.5
>> >
>> > I am attempting to set up Tomcat to use two keystore's with SNI.  Tomcat
>> > starts successfully but but I receive a timeout when trying to access
>> > either of the defined server names.
>>
>> 
>>
>> > As mentioned, Tomcat start successfully, but the sites time out.  There
>> is
>> > nothing in the logs that indicate a request is even made.
>> >
>> > Am I missing something in this configuration?  Any guidance is greatly
>> > appreciated.
>>
>> What do the logs say when Tomcat starts with the non-working
>> configuration?
>>
>> Mark
>>
>> -
>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>
>>
>
> Thanks for the reply Mark.  Unfortunately there no extra information in
> the logs from the non-working configuration.  It appears that everything
> starts successfully with working and non-working configuration.
>
> As mentioned, the timeout attempting to connect to the SNI domains does
> not register in the logs either.
>
> HB
>


Damn, my bad.  I figured it out.

Embarrassingly, I had an incorrect password for one of the keystores.  I
was focusing so much on the configuration parameters I overlooked the
simple part.

Thanks,

HB


Re: Server Name Identification (SNI) configuration Tomcat 8.5.23

2019-02-12 Thread Herb Burnswell
On Tue, Feb 12, 2019 at 11:26 AM Mark Thomas  wrote:

> On 12/02/2019 19:21, Herb Burnswell wrote:
> > All,
> >
> > Tomcat: 8.5.23
> > OS: RHEL 7.5
> >
> > I am attempting to set up Tomcat to use two keystore's with SNI.  Tomcat
> > starts successfully but but I receive a timeout when trying to access
> > either of the defined server names.
>
> 
>
> > As mentioned, Tomcat start successfully, but the sites time out.  There
> is
> > nothing in the logs that indicate a request is even made.
> >
> > Am I missing something in this configuration?  Any guidance is greatly
> > appreciated.
>
> What do the logs say when Tomcat starts with the non-working configuration?
>
> Mark
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

Thanks for the reply Mark.  Unfortunately there no extra information in the
logs from the non-working configuration.  It appears that everything starts
successfully with working and non-working configuration.

As mentioned, the timeout attempting to connect to the SNI domains does not
register in the logs either.

HB


Re: Server Name Identification (SNI) configuration Tomcat 8.5.23

2019-02-12 Thread Mark Thomas
On 12/02/2019 19:21, Herb Burnswell wrote:
> All,
> 
> Tomcat: 8.5.23
> OS: RHEL 7.5
> 
> I am attempting to set up Tomcat to use two keystore's with SNI.  Tomcat
> starts successfully but but I receive a timeout when trying to access
> either of the defined server names.



> As mentioned, Tomcat start successfully, but the sites time out.  There is
> nothing in the logs that indicate a request is even made.
> 
> Am I missing something in this configuration?  Any guidance is greatly
> appreciated.

What do the logs say when Tomcat starts with the non-working configuration?

Mark

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Server Name Identification (SNI) configuration Tomcat 8.5.23

2019-02-12 Thread Herb Burnswell
All,

Tomcat: 8.5.23
OS: RHEL 7.5

I am attempting to set up Tomcat to use two keystore's with SNI.  Tomcat
starts successfully but but I receive a timeout when trying to access
either of the defined server names.

Here is a single server name configuration that works successfully:



Here is the SNI configuration that I'm trying:






























As mentioned, Tomcat start successfully, but the sites time out.  There is
nothing in the logs that indicate a request is even made.

Am I missing something in this configuration?  Any guidance is greatly
appreciated.

Best,

HB