Hi guys,
well let me explain my problem. I use Liferay 5.2.3 bundled with Apache Tomcat 5.5.27. The whole portal uses HTTPS and till today I was using a self-signed certificate without any problem. So now I got a Verisign CA certificate and I wanted to install it on my Tomcat.
I imported successfully using keytool the certification on keystore. Then I started Tomcat, I noticed that port 443 (that I use) was listening as it should but I couldn't access to the website. I got an error "SSL handshake errorjavax.net.ssl.SSLExce
ption: No available certificate or key corresponds to the SSL cipher suites which are enabled."
This is the relevant part of my server.xml file (it is just the latest version...):
<!-- Define a SSL HTTP/1.1 Connector on port 8443 -->
<Connector port="443" maxHttpHeaderSize="8192"
maxThreads="150" minSpareThreads="25" maxSpareThreads="75" enableLookups="true" disableUploadTimeout="true
" address="82.103.132.56" acceptCount="100" scheme="https" secure="true" ciphers="TLS_KRB5_WITH_RC4
_128_MD5,T
LS_KRB5_WI
TH_3DES_ED
E_CBC_MD5,
TLS_KRB5_WITH_DES_CBC_MD5,
TLS_KRB5_E
XPORT_WITH
_RC4_40_MD
5,
TLS_KRB5_EXPORT_WITH_DES_C
BC_40_MD5"
clientAuth="false" sslProtocol="TLS"
keystoreFile="/tomcat-ssl/
my.kdb" keystorePass="changeit" keystoreType="JKS"/>
The following is the catalina log:
Aug 12, 2009 11:52:21 AM org.apache.catalina.core.A
prLifecycl
eListener lifecycleEvent
INFO: The Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: /usr/lib/jvm/java-6-sun-1.
6.0.14/jre
/lib/amd64
/server:/u
sr/lib/jvm
/j
ava-6-sun-1.6.0.14/jre/lib
/amd64:/us
r/lib/jvm/
java-6-sun
-1.6.0.14/
jre/../lib
/amd64:/us
r/java/pac
kages/lib/
amd64:/lib
:/usr/lib
Aug 12, 2009 11:52:31 AM org.apache.coyote.http11.H
ttp11BaseP
rotocol init
INFO: Initializing Coyote HTTP/1.1 on http-82.103.132.56-443
Aug 12, 2009 11:52:31 AM org.apache.catalina.startu
p.Catalina
load
INFO: Initialization processed in 23558 ms
Aug 12, 2009 11:52:34 AM org.apache.catalina.core.S
tandardSer
vice start
INFO: Starting service Catalina
Aug 12, 2009 11:52:34 AM org.apache.catalina.core.S
tandardEng
ine start
INFO: Starting Servlet Engine: Apache Tomcat/5.5.27
Aug 12, 2009 11:52:35 AM org.apache.catalina.core.S
tandardHos
t start
INFO: XML validation disabled
Aug 12, 2009 11:59:32 AM org.apache.coyote.http11.H
ttp11BaseP
rotocol start
INFO: Starting Coyote HTTP/1.1 on http-82.103.132.56-443
Aug 12, 2009 11:59:32 AM org.apache.catalina.storec
onfig.Stor
eLoader load
INFO: Find registry server-registry.xml at classpath resource
Aug 12, 2009 11:59:33 AM org.apache.catalina.startu
p.Catalina
start
INFO: Server startup in 422046 ms
Aug 12, 2009 11:59:33 AM org.apache.tomcat.util.net
.PoolTcpEn
dpoint acceptSocket
SEVERE: Endpoint [SSL: ServerSocket[addr=/82.103.
132.56,por
t=0,localp
ort=443]] ignored exception: java.net.SocketException: SSL handshake errorjavax.net.ssl.SSLExce
ption: No available certificate or key corr
esponds to the SSL cipher suites which are enabled.
java.net.SocketException: SSL handshake errorjavax.net.ssl.SSLExce
ption: No available certificate or key corresponds to the SSL cipher suites which are enabled.
at org.apache.tomcat.util.net
.jsse.JSSE
SocketFact
ory.accept
Socket(JSS
ESocketFac
tory.java:
114)
at org.apache.tomcat.util.net
.PoolTcpEn
dpoint.acc
eptSocket(
PoolTcpEnd
point.java
:408)
at org.apache.tomcat.util.net
.LeaderFol
lowerWorke
rThread.ru
nIt(Leader
FollowerWo
rkerThread
.java:71)
at org.apache.tomcat.util.thr
eads.Threa
dPool$Cont
rolRunnabl
e.run(Thre
adPool.jav
a:689)
at java.lang.Thread.run(Threa
d.java:619
)
Aug 12, 2009 11:59:33 AM org.apache.tomcat.util.net
.PoolTcpEn
dpoint acceptSocket
WARNING: Reinitializing ServerSocket
Aug 12, 2009 11:59:33 AM org.apache.tomcat.util.net
.PoolTcpEn
dpoint acceptSocket
SEVERE: Endpoint [SSL: ServerSocket[addr=/82.103.
132.56,por
t=0,localp
ort=443]] ignored exception: java.net.SocketException: SSL handshake errorjavax.net.ssl.SSLExce
ption: No available certificate or key corr
esponds to the SSL cipher suites which are enabled.
java.net.SocketException: SSL handshake errorjavax.net.ssl.SSLExce
ption: No available certificate or key corresponds to the SSL cipher suites which are enabled.
at org.apache.tomcat.util.net
.jsse.JSSE
SocketFact
ory.accept
Socket(JSS
ESocketFac
tory.java:
114)
at org.apache.tomcat.util.net
.PoolTcpEn
dpoint.acc
eptSocket(
PoolTcpEnd
point.java
:408)
at org.apache.tomcat.util.net
.LeaderFol
lowerWorke
rThread.ru
nIt(Leader
FollowerWo
rkerThread
.java:71)
at org.apache.tomcat.util.thr
eads.Threa
dPool$Cont
rolRunnabl
e.run(Thre
adPool.jav
a:689)
at java.lang.Thread.run(Threa
d.java:619
)
....
and the same error is repeated again and again (crash)
...
Do you have any suggestions? If yeah please let me know!
Thanks in advance!