-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 George,
On 11/16/16 12:38 PM, George Chanady wrote: > I hope someone can help.I have exhausted all my troubleshooting > skills and all of my newbie Linux knowledge and I am at the end of > my rope. > > All documentation from around the web always seem to tell me to > try everything I have already tried. I am sure that there must be a > caveat that I am missing. > > I have an AWS Linux instance with Tomcat 7.0.73 and cannot for the > life of me get the SSL working. > > I set up the AWS instance with nothing else on the server and using > a fresh installation of Tomcat with basic config settings. I am > able to connect http://mysite.com:8080 but cannot connect with > https://mysite.com:8443. I am able to SSH as that is the only way I > communicate with the server. > > I only have forwarders for port 80 and 443 in the iptables and > nothing else and have security groups in AWS setup to allow all > traffic from everywhere for ports 80, 8080, 443, and 8443. > > I have ensured the ports needed are open and listening using > netstat I have checked to ensure connectivity to the ports from > other machines using netcat I checked that the certs were installed > properly and that the tomcat connectors were pointed the proper > location > > I am attaching my configuration from start to where I hit the > wall. What if you give curl the --tls1 switch? Can you try with openssl s_client? I find that tends to give more information about the conversation. - -chris -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJYLcVwAAoJEBzwKT+lPKRY+7UQAIURP7wWTMinfL8E28SERuwK NsyvBQOEsWXSHweN5tkmgqiUF7zWcYFf0j+reDpaEvR9KIV+Wd1vI/LvCqQO7wEA p8Nv+jvet3ObWOInN9A0HcZsf8H5bpuIrE0a2d/B5P2EIFEOlESgjhgyEjcNEVL/ LFwSZX+rCbtzt/vSSk8fQpout7+5jaYIOLOhxmB4qAvBJI3dLXOV4d3Kfty+FxrK JfUwBDsS4RdZoH+i52XXemERR+Y5cIcpNul2BFQ0xo2knRfVPl1b1mzWxJGuAFbI lHZr9QuyaOymgYJ6PTGRQZXx2jXCdYM7U8ryTShTeiGC8b5IMfMF9z2E3qRfdcAw RZXaDJ3GKVPcZcGBvFCtP6G5I1UiOi6PrXu/TkjmfG8tlyqA3dkXyH/dIYUYuO0Y h65brIcLNZZbiOECX0v/jupMlnHa584cZcYOnvXF9wrfBQb3d62PFf4DRO+a0ozk AKEGxBdGt75KzMpb5PS6pH+T74P6LHqrCTEzZ63G9O0No0CSKFwRizb+4DGeOTDN dYk7Bx7+HolYe1u02mBgEfgfwItrj8131ddHoHSp8btYVyJ+2HfmI9DOJV9Cxo+r 1aa0DeIsu6G24TkFrpNzn+SgBYyZdp/+lNeWnxbz4fu4wMLcetVbpSdSjQ8xeKna uIACDouiyhLDNYXgVhmz =/Z5J -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
