On 6/2/22 11:43, Rob Sargent wrote:


I had this overall configuration working until I 'terminated' the AWS server instance and am trying to rebuild.

Could a lack of network connectivity between client and server present this same symptom?

Hmm. Your SAN looks okay to me. Are you 100% sure you have that certificate configured in Tomcat? ARe you using some other component in front of Tomcat? You should be able to connect using:

$ openssl s_client -showcerts -connect 10.0.2.118:443

This will dump the certificate actually presented by the server. You can copy/paste that into:

$ openssl x509 -text

and get the details to make sure the SAN appears there.

-chris

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Thanks Chris, given your vote of confidence I realized I had not updated the keystore file with my recently regenerated cert. Also forgot to mention this is tomcat 9.0.63 embedded in my app, running java17 (correto) at AWS

But I think I'm going backwards.

Hang on.  I'm panicking.  I have a plane to catch in 3 hours and need this working by then.

   ws s3 cp fullca.p12 s3://691459864434-sgs-source/certs/sgstrust.p12

splatting one file on top of the other

Reply via email to