[Ilugc] Doubt in SSL implementation

  • From: dineshatit@xxxxxxxxx (Dinesh Kumar Rajagopal)
  • Date: Wed Feb 17 12:02:25 2010

Hai ilugc,

          Our company got certification from comodo , this are files are
included for ssl

1. AddTrustExternalCARoot.crt
2. NetworkSolutions_CA.crt
3. UTNAddTrustServer_CA.crt
4. mydomain.crt

commands used to create keystore

1. keytool -import -trustcacerts -alias root -file
AddTrustExternalCARoot.crt -keystore tomcat.key

2. keytool -import -trustcacerts -alias INTER -file UTNAddTrustServer_CA.crt
-keystore tomcat.key

3.keytool -import -trustcacerts -alias tomcat -file mydomain.crt -keystore
tomcat.key

After this , i included this keystore in jboss as below

<Connector

port="8443" protocol="HTTP/1.1" SSLEnabled="true" strategy="ms"
address="${jboss.bind.address}"

maxThreads="300" minSpareThreads="25" maxSpareThreads="25"
maxKeepAliveRequests="1"
           scheme="https" secure="true" clientAuth="false" sslProtocol =
"TLS"
           keystoreFile="/usr/jboss-4.2.3.GA/server/default/conf/tomcat.key"
           keystorePass="password"
/>

Error was "2010-02-16 17:01:36,380 ERROR
[org.apache.tomcat.util.net.JIoEndpoint] Socket accept failed
java.net.SocketException: SSL handshake errorjavax.net.ssl.SSLException: No
available certificate or key corresponds to the SSL cipher suites which are
enabled.
        at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.acceptSocket(JSSESocketFactory.java:150)
        at
org.apache.tomcat.util.net.JIoEndpoint$Acceptor.run(JIoEndpoint.java:309)
        at java.lang.Thread.run(Thread.java:619)
"
Is this correct ? where i am wrong ? please help me out !!

Other related posts: