Terence, 

I poked around in the configuration file and knew it was something I did to 
screw it up.  I just scrapped the install and started from fresh. 

Thanks for the reply

Vince DiScipio
Director of Digital Infrastructure
The College of Wooster
P - 330-263-2612
F - 330-263-2666 

-----Original Message-----
From: Terence M. Bandoian [mailto:tere...@tmbsw.com] 
Sent: Wednesday, April 30, 2014 3:01 PM
To: Tomcat Users List
Subject: Re: Setup Issue tomcat 6 SLES 11 SSL

On 4/30/2014 9:02 AM, Christopher Schultz wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Vincent,
>
> On 4/29/14, 4:24 PM, Vincent T. DiScipio wrote:
>> I have setup tomcat 6 on SLES 11 and secured the instance with an 
>> external certificate if authority.  The following is occurring from 
>> the same machine using both IE and Firefox:
>>
>> http://servername.wooster.edu:8080    works for both IE11 and
>> Firefox 29 and displays the index.html
>>
>> https://servername.wooster.edu:8443  works for Firefox 29 and 
>> displays the index.html
>>
>> https://servername.wooster.edu:8443  does not work for IE11v displays 
>> "This page can't be displayed"
>>
>> I have changed the logging level to finest and do not see any errors 
>> in the catalina.out.
>>
>> Thoughts?  I have the same setup on another server and I believe the 
>> files and permission levels are set the same.
> What does your SSL configuration look like?
>
> You could also use either sslscan from the CLI or go to 
> https://www.ssllabs.com/ssltest/ and use their online tool to examine 
> the site from the outside.
>
> Perhaps you have a combination of protocols and ciphers that MSIE 
> can't handle.
>
> - -chris


If the option is available, you might also try disabling the IE "friendly" 
error messages.  I'm not sure about IE 11, but it seems like previous versions 
displayed an error message with a reddish background if they were unable to 
authenticate a server with a given SSL certificate.  Was a certificate 
authority bundle supplied with the SSL certificate?  If so, is it installed and 
configured?  Were the SSL certificates on the both servers issued by the same 
company?

-Terence Bandoian


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to