LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 09-01-2017, 09:15 AM   #1
Mark_667
Member
 
Registered: Aug 2005
Location: Manchester, England
Distribution: Ubuntu 20.04
Posts: 381

Rep: Reputation: 30
HTTPS connection error in Tomcat 7


I'm getting a 404 in my browser when trying to connect to my Tomcat 7 instance. Putting :443 on the end of the URL gives ERR_INVALID_HTTP_RESPONSE

I get the following in the catalina log:
Sep 04, 2017 10:28:48 AM org.apache.catalina.startup.Catalina start
INFO: Server startup in 2158 ms
Allow unsafe renegotiation: false
Allow legacy hello messages: true
Is initial handshake: true
Is secure renegotiation: false
http-bio-443-Acceptor-0, setSoTimeout(60000) called
Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1
Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 for TLSv1
Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1
Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 for TLSv1
Ignoring unsupported cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 for TLSv1
Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 for TLSv1
Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
Ignoring unsupported cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 for TLSv1.1
Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 for TLSv1.1
http-bio-443-exec-1, handling exception: javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection?
http-bio-443-exec-1, SEND TLSv1.2 ALERT: fatal, description = unexpected_message
http-bio-443-exec-1, WRITE: TLSv1.2 Alert, length = 2
http-bio-443-exec-1, called closeSocket()
http-bio-443-exec-1, IOException in getSession(): javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection?
http-bio-443-exec-1, called close()
http-bio-443-exec-1, called closeInternal(true)

server.xml
<!-- Define a non-SSL HTTP/1.1 Connector on port 80 -->
<Connector port="80" maxHttpHeaderSize="8192"
maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
enableLookups="false" redirectPort="443" acceptCount="100"
connectionTimeout="20000" disableUploadTimeout="true" />

<Connector port="443" protocol="org.apache.coyote.http11.Http11Protocol"
maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
keystoreFile="/home/me/.keystore" keystoreType="JKS" keystorePass="changeit" keyPass="changeit"
clientAuth="false" sslProtocol="TLS" />

Last edited by Mark_667; 09-04-2017 at 06:13 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
tomcat 6 does not start https on solaris 10 mariogarcia Linux - Server 1 10-27-2016 09:16 AM
configure tomcat with https fernfrancis Linux - Newbie 1 04-28-2010 12:59 PM
configure tomcat with https fernfrancis Linux - Newbie 1 04-27-2010 08:27 AM
How to switch on https in apache-tomcat-6.0.14 wrennybeno Linux - Software 1 12-23-2009 06:47 AM
Error Loading https://.. Connection refused rover Linux - Networking 4 10-19-2004 05:16 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 11:22 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration