amazon web services - AWS Tomcat SSL browser errors - what have I missed? -


i'm attempting set tls (ssl) domain hosted on aws bitnami users can access on https. running on apache tomcat standalone , not fronted lb.

to generate certificate signing request (csr) have:

sudo openssl genrsa -out /opt/bitnami/apache-tomcat/conf/server.key 2048

and entered correct information i.e. hostname in www.hostname.com format, then:

sudo openssl req -new -key /opt/bitnami/apache-tomcat/conf/server.key -out /opt/bitnami/apache2/conf/cert.csr

following have copied .csr file contents ca (ssl.comodo.com) & saved resulting files: .ca-bundle , .crt file.

following have uploaded files tomcat directory , loaded them java keystore:

keytool -import -trustcacerts -alias root -file www_domainname_com.ca-bundle -keystore keystore.jks

and .crt:

keytool -import -trustcacerts -alias tomcat -file www_domainname_com.crt -keystore keystore.jks

tomcat configured use keystore following config in server.xml:

<connector port="443" protocol="org.apache.coyote.http11.http11nioprotocol" maxthreads="150" sslenabled="true" scheme="https" secure="true" clientauth="false" keystorefile="/home/bitnami/keystore.jks" keystorepass="passwordhere" sslprotocol="tls"/>

then apache has been restarted. browser errors receive are:

chrome:

uses unsupported protocol. err_ssl_version_or_cipher_mismatch

firefox:

no common encryption algorithm(s). error code: ssl_error_no_cypher_overlap

my thoughts

based on stack overflow question here think may have rsa - when generate new keystore -keyalg rsaparameter: $java_home/bin/keytool -genkey -alias tomcat -keyalg rsa , point tomcat server.xml ssl config site loads on https , warnings in browser telling me self-signed certificate.

if want generate using openssl, must convert private key , certificate chain, not certificate(s) alone, java-usable keystore, either pkcs12 or jks.

if want generate using java, use keytool -genkeypair -keyalg rsa (and before j7 add -keysize 2048), then use java keytool generate csr give ca (comodo), , use java keytool import new cert , chain ca.

see options @ (my) https://stackoverflow.com/a/37423399/2868801 , several additional dupes linked there.


Comments

Post a Comment

Popular posts from this blog

resizing Telegram inline keyboard -

telegram's inline keyboard great feature lots of different use cases. inline buttons added list of items this: inline_keyboard = [[inlinekeyboardbutton(text="button", callback_data="button"), inlinekeyboardbutton(text="reset",callback_data="reset")]] inline_keyboard_markup = inlinekeyboardmarkup(inline_keyboard) update.message.reply_text("hi", reply_markup=inline_keyboard_markup) the above code adds 2 buttons each half width of chat screen. i know the normal keyboard button there resize_keyboard parameter somehow can used. my question is there way resize inline buttons ? example make full width or quarter width. unfortunately, can't now. :( you can suggest @botsupport , might add feature next version.
Read more

command line - How can a Python program background itself? -

consider following python command-line program. doesn't work because incomplete, think illustrates problem: #!/usr/bin/python3 import multiprocessing pool = multiprocessing.pool() task in expensive_iterator_with_user_interaction(): pool.call_async(expensive_computation, (task,)) pool.close() print("dear user, may press ctrl-z , bg script.") pool.join() thus, problem scripts needs user input while it's launching expensive parallel processes. there moment when user interaction not needed anymore. then, ask user background process shell actions. however, can achieved program itself? (side note: core of problem entanglement of user input firing “expensive computations”. therefore, cannot separate both in 2 scripts, , letting 1 spawning other daemon.) the command screen may you. use screen -l create new session , run application. after inputting data, can press " ctrl-a " , press " d " on keyboard detach session. now...
Read more

php - "cURL error 28: Resolving timed out" on Wordpress on Azure App Service on Linux -

Image
my wordpress installation on azure app service on linux using custom docker container has slow response times. pages take around 20-40 seconds load. i have troubleshooting plugin installed indicates problem "curl error 28: resolving timed out after n milliseconds" when making requests following urls https://api.wordpress.org/core/version-check/1.7/ http://api.wordpress.org/core/version-check/1.7/ https://api.wordpress.org/plugins/update-check/1.1/ http://api.wordpress.org/plugins/update-check/1.1/ https://api.wordpress.org/themes/update-check/1.1/ http://api.wordpress.org/themes/update-check/1.1/ curl works fine on scm-site command line. example works ok. curl -x post http://api.wordpress.org/core/version-check/1.7/ edit if ssh container , run php code, works fine. <?php $url = 'http://api.wordpress.org/core/version-check/1.7/'; $fields = array( 'version' => urlencode('4.8.1'), 'php' => urlencode(...
Read more