Hi,
OS Version - centos-release-6-5.el6.
Tomcat - tomcat 7.0.53
JDK/JRE - java-1.7.0-openjdk-1.7.0.91.x86_64
I created a self signed keystore and certificate and configured below in
tomcat server.xml <Connector port="8443"
protocol="org.apache.coyote.http11.Http11Protocol"
               maxThreads="150" SSLEnabled="true" scheme="https"
secure="true" keystoreFile="${user.home}/.keystore"
keystorePass="changeit"
               clientAuth="false" sslProtocol="TLS" /> But when I try to
access by https://hostname:8443/  URL I get below exception.
"IOException: SSL handshake failed. Ciper suite in SSL Session is
SSL_NULL_WITH_NULL_NULL"
I even added the certificate to JDK cacerts keystore, but got the same
excpetion. 
I also updated nss library, but that also did not work. By the way how to
check the nss version?
On Windows I was able to easily get it working but on CentOS machine I am
struggling from 1 week but still no success.
Any help will be highly appreciated.
Thanks,
Ravikumar
Disclaimer: This e-mail may contain Privileged/Confidential information and is 
intended
only for the individual(s) named. Any review, retransmission, dissemination or 
other use
of, or taking of any action in reliance upon this information by persons or 
entities
other than the intended recipient is prohibited. Please notify the sender, if 
you have
received this e-mail by mistake and delete it from your system. Information in 
this
message that does not relate to the official business of the company shall be 
understood
as neither given nor endorsed by it. E-mail transmission cannot be guaranteed 
to be
secure or error-free. The sender does not accept liability for any errors or 
omissions in
the contents of this message which arise as a result of e-mail transmission.If
verification is required please request a hard-copy version.
Visit us at http://www.harbingergroup.com/

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to