Hi,
I am trying to install and use a trial certificate from Verisign with
Tomcat server (4.1.12) and jdk 1.4.1_01 on Windows 2000.
I follow the instructions in the ssl-howto but I get this error-message
when I try to see a secure web page :
SEVERE: Handshake failed
javax.net.ssl.SSLHandshakeException: no cipher suites in common
at com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.a(DashoA6275)
......
SEVERE: Caught exception executing
org.apache.tomcat.util.net.TcpWorkerThread@1786286, terminating thread
java.lang.NullPointerException at
org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:512)
......
SEVERE: Handshake failed
javax.net.ssl.SSLException: Unsupported SSL v2.0 ClientHello at
com.sun.net.ssl.internal.ssl.InputRecord.b(DashoA6275)
at com.sun.net.ssl.internal.ssl.InputRecord.read(DashoA6275)
.......
This is the config of my sever.xml file :
<!-- Define a non-SSL Coyote HTTP/1.1 Connector on port 8080 -->
<Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
port="8080" minProcessors="5" maxProcessors="75" enableLookups="true"
redirectPort="443" acceptCount="10" debug="0" connectionTimeout="20000"
useURIValidationHack="false"/>
<!-- Note : To disable connection timeouts, set connectionTimeout value
to -1 -->
<!-- Define a SSL Coyote HTTP/1.1 Connector on port 8443 -->
<Connector className="org.apache.coyote.tomcat4.CoyoteConnector" port="443"
minProcessors="5" maxProcessors="75" enableLookups="true" acceptCount="10"
debug="0" scheme="https" secure="true" useURIValidationHack="false">
<Factory className="org.apache.coyote.tomcat4.CoyoteServerSocketFactory"
clientAuth="false" keystoreFile="\conf\keystore" protocol="TLS"/>
</Connector>
<!-- Define a Coyote/JK2 AJP 1.3 Connector on port 8009 -->
<Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
port="8009" minProcessors="5" maxProcessors="75" enableLookups="true"
redirectPort="443" acceptCount="10" debug="0" connectionTimeout="20000"
useURIValidationHack="false"
protocolHandlerClassName="org.apache.jk.server.JkCoyoteHandler"/>
Everything works when I use a self-signed certificate!
Any help would be greatly appreciated!
Thanks.
Micha�l Boland.
--
To unsubscribe, e-mail: <mailto:tomcat-user-unsubscribe@;jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-user-help@;jakarta.apache.org>
