Re: https-certificate - Lets encrypt

2019-05-15 Thread R. Scholz

Hello and good morning,

yesterday in the evening I had successfully installed the lets 
encrypt-certificate.


Great.

If anybody wants a "step-by-step-receipt" to implement a lets-encrypt 
certificate in a computer behind a firewall

(no access over port 80): Send me a hint. I have some notes (in german).
Requirement: You must have access to the DNS-Settings of your Domain 
(Sub-Domain) to add a record.


With best regards,

René



Am 14.05.2019 um 15:36 schrieb Maxim Solodovnik:

Maybe "certificateChainFile="conf/chain.pem""  should be fullchain.pem?
Additionally you can turn ON SSL debug logging to get more details

On Tue, 14 May 2019 at 20:33, René Scholz
 wrote:

Hello,

I try to import an lets encrypt-certificate into OM 5-M2.

With a few commands I have 4 certificates (wildcard-certificate):
cert.pem
chain.pem
fullchain.pem
privkey.pem

I try to edit the server.xml, remark the original lines for "connector port 
5443" and replace it with:


   
 
   


And - nothing. Tomcat doesn't start with the error

14-May-2019 15:31:13.005 SCHWERWIEGEND [main] 
org.apache.catalina.startup.Catalina.start Cannot start server, server instance 
is not configured

Have anyone a hint where I make a mistake?

With best regards,

René









Re: https-certificate - Lets encrypt

2019-05-14 Thread Maxim Solodovnik
Maybe "certificateChainFile="conf/chain.pem""  should be fullchain.pem?
Additionally you can turn ON SSL debug logging to get more details

On Tue, 14 May 2019 at 20:33, René Scholz
 wrote:
>
> Hello,
>
> I try to import an lets encrypt-certificate into OM 5-M2.
>
> With a few commands I have 4 certificates (wildcard-certificate):
> cert.pem
> chain.pem
> fullchain.pem
> privkey.pem
>
> I try to edit the server.xml, remark the original lines for "connector port 
> 5443" and replace it with:
>
> 
>   
>   certificateKeyFile="conf/privkey.pem"
>  certificateChainFile="conf/chain.pem" />
>   
> 
>
> And - nothing. Tomcat doesn't start with the error
>
> 14-May-2019 15:31:13.005 SCHWERWIEGEND [main] 
> org.apache.catalina.startup.Catalina.start Cannot start server, server 
> instance is not configured
>
> Have anyone a hint where I make a mistake?
>
> With best regards,
>
> René
>
>
>


-- 
WBR
Maxim aka solomax


https-certificate - Lets encrypt

2019-05-14 Thread René Scholz

Hello,

I try to import an lets encrypt-certificate into OM 5-M2.

With a few commands I have 4 certificates (wildcard-certificate):
cert.pem
chain.pem
fullchain.pem
privkey.pem

I try to edit the server.xml, remark the original lines for "connector 
port 5443" and replace it with:



  

  


And - nothing. Tomcat doesn't start with the error

/14-May-2019 15:31:13.005 SCHWERWIEGEND [main] 
org.apache.catalina.startup.Catalina.start Cannot start server, server 
instance is not configured/


Have anyone a hint where I make a mistake?

With best regards,

René