You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Fredrik Liden <fl...@translate.com> on 2004/07/09 00:46:30 UTC

Tomcat 4.1.30 + SSL = Problems

I followed the instructions on the tomcat SSL Config page.
I generated the .keystore file using changeit password.

When I go to the test page http://localhost:8443/ I see  5 squares up in
the left corner and that's it. Anyone encountered this?? I'm not sure
how to proceed.

I'm using Jdk 1.4.1 so I shouldn't have to download the JSSE files
according to the instructions.

Anyone please!

/Fredrik

Re: Tomcat 4.1.30 + SSL = Problems

Posted by Dennis Dai <dd...@ddai.net>.
On 7/8/2004 7:39 PM, QM wrote:
> : > Use https://... instead of http://...
> : 
> : Wow, if only I'd held off a few more minutes on my mail; thanks, this
> : was my problem as well.  Is there a reason there's not a more legible
> : error?
> 
> 
> The server expects to complete an SSL-enabled handshake before your
> HTTP-level request makes it to Tomcat proper.  Since you don't issue the
> GET/POST to Tomcat in this case, it certainly can't generate an
> HTTP-level error page in response.
> 
> Sniff the connection and you'll see.  The "four squares" are likely your
> brower's approximation of the non-ASCII chars it received from the
> server when attempting a handshake.
> 
> -QM
> 

Don't know how Apache's httpd server handles it - if I send an http 
request to the https port (eg. http://www.domain.com:443) which has ssl 
support, it managed to display something like:

"Bad Request

Your browser sent a request that this server could not understand.
Reason: You're speaking plain HTTP to an SSL-enabled server port.
Instead use the HTTPS scheme to access this URL, please.

     Hint: https://www.domain.com:443/"

I wonder if it's possible to hack the coyote connector to have the same 
behavior ...


Dennis

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Re: Tomcat 4.1.30 + SSL = Problems

Posted by QM <qm...@brandxdev.net>.
: > Use https://... instead of http://...
: 
: Wow, if only I'd held off a few more minutes on my mail; thanks, this
: was my problem as well.  Is there a reason there's not a more legible
: error?


The server expects to complete an SSL-enabled handshake before your
HTTP-level request makes it to Tomcat proper.  Since you don't issue the
GET/POST to Tomcat in this case, it certainly can't generate an
HTTP-level error page in response.

Sniff the connection and you'll see.  The "four squares" are likely your
brower's approximation of the non-ASCII chars it received from the
server when attempting a handshake.

-QM

-- 

software  -- http://www.brandxdev.net
tech news -- http://www.RoarNetworX.com


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Re: Tomcat 4.1.30 + SSL = Problems

Posted by Jason <sp...@angryfish.infosec.its.utexas.edu>.
=== Thu, Jul 08, 2004 at 05:35:05PM -0700 / Dennis Dai ===
> >I followed the instructions on the tomcat SSL Config page.
> >I generated the .keystore file using changeit password.
> >
> >When I go to the test page http://localhost:8443/ I see  5 squares up in
> >the left corner and that's it. Anyone encountered this?? I'm not sure
> >how to proceed.
> 
> Use https://... instead of http://...
> 
> >I'm using Jdk 1.4.1 so I shouldn't have to download the JSSE files
> >according to the instructions.
> >
> >Anyone please!
> >
> >/Fredrik
=== End Quote ===

Wow, if only I'd held off a few more minutes on my mail; thanks, this
was my problem as well.  Is there a reason there's not a more legible
error?

Jason

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Re: Tomcat 4.1.30 + SSL = Problems

Posted by Dennis Dai <dd...@ddai.net>.
On 7/8/2004 3:46 PM, Fredrik Liden wrote:

> I followed the instructions on the tomcat SSL Config page.
> I generated the .keystore file using changeit password.
> 
> When I go to the test page http://localhost:8443/ I see  5 squares up in
> the left corner and that's it. Anyone encountered this?? I'm not sure
> how to proceed.

Use https://... instead of http://...

> I'm using Jdk 1.4.1 so I shouldn't have to download the JSSE files
> according to the instructions.
> 
> Anyone please!
> 
> /Fredrik
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org