This is the last thing I need to sort before I pull the trigger on an enterprise purchase.
Followed all the bouncy balls to get a proper SSL cert.
Installed it.
Previously the client browser would simply carry on about a self-signed cert. I expected that.
However now with a proper cert in there; nothing.
Firefox simply reports:
Unable to Connect Securely
Firefox cannot guarantee the safety of your data on lab.estem-uc.edu.au because it uses SSLv3, a broken security protocol.
Advanced info: ssl_error_no_cypher_overlap
I've added in SSLv2Hello and SSLv3 to a tls.bin file. (Although SSLv3 seems to not do anything going by the weblog
Weblog here:
Version: v3.63 >>> 771a04b2-1925-4cbd-a883-89545c5c22f7
windows-1252
OWN FILE SERVER
JWTS webserver at 15360
Handler Server at 15367 started!
Flash Policy Server at 15368
SSL LAYER ACTIVATED!!!
Key set from cert.jks!!!
Using now own passwords for cert.jks
Available cores: 24
Free Memory: 433Gb
am_am
ar_ar
ar_sa
az_cyrl_az
az_latn_az
be_be
bg_bg
bn_bn
bs_cyrl_ba
bs_latn_ba
ca_ca
cs_cs
cs_cz
cy_gb
da_da
da_dk
de_ch
de_de
dv_dv
el_el
el_gr
en_ca
en_en
en_gb
en_ie
en_in
en_us
es_ar
es_es
es_mx
et_et
eu_es
fa_fa
fi_fi
fo_fo
fr_be
fr_ca
fr_ch
fr_fr
ge_ge
gu_gu
he_he
he_il
hi_hi
hr_hr
hu_hu
hy_hy
ig_ig
is_is
it_ch
it_it
iu_latn_ca
ja_ja
ja_jp
ka_ka
kk_kk
km_km
kn_kn
ko_ko
ko_kr
ky_ky
kz_kz
lb_lb
lo_lo
lt_lt
lu_lu
lv_lv
mi_mi
mk_mk
ml_ml
mn_mn
mr_mr
mt_mt
nb_nb
nb_no
ne_ne
nl_be
nl_nl
or_or
pa_pa
pl_pl
ps_ps
pt_br
pt_pt
ro_ro
ru_ru
sah_ru
se_no
se_se
si_sl
sk_sk
sl_sl
sq_sq
sr_la
sr_sr
sv_se
sv_sv
sy_sy
ta_ta
te_te
th_th
tr_tr
tt_tt
ug_ug
uk_uk
ur_ur
uz_uz
vi_vi
wo_wo
yo_yo
zh_cn
zh_hk
zh_mo
zh_sg
zh_tw
zh_zh
Server Started at port [443]
Server Started at port [80]
Server Started at port [843]
Check https available repository: //127.0.0.1:443/
Disabled protocols: SSLv2Hello
Enabled protocols: [TLSv1, TLSv1.1, TLSv1.2]
Enabled ciphers: [TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_RC4_128_SHA, SSL_RSA_WITH_RC4_128_SHA, TLS_ECDH_ECDSA_WITH_RC4_128_SHA, TLS_ECDH_RSA_WITH_RC4_128_SHA, SSL_RSA_WITH_RC4_128_MD5, TLS_EMPTY_RENEGOTIATION_INFO_SCSV]
SSL instance did not deliver any data!
Exit third check loop after 3 minutes!
Its starting to drive me a bit insane given that it was 'kind of working' and now nothing.
It all works over http by the way, but I intend to force https.
Help??
SSL Issues
Re: SSL Issues
Fresh install, started from scratch. All good.
Re: SSL Issues
By such kind of issues always make backup of cert.jks before trying to change it.
The server contains self signed certificate, if cert.jks was not found, it gets reused, so after deleting this file/restarting html5 server in GUI that would always fix any self made issues.
The server contains self signed certificate, if cert.jks was not found, it gets reused, so after deleting this file/restarting html5 server in GUI that would always fix any self made issues.
TSplus HTML5 and Java web engineer