You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Chris Strickland <dr...@yahoo.com.INVALID> on 2021/08/05 16:16:05 UTC
Connector Port Issue
Trying to figure out why I'm seeing the following errors in the log. I'm sure they are the reason why I cannot connect to my server via a browser on the specified port. Any help is greatly appreciated. Tomcat 10.0.7 is running (xxxxx below are intentionally left out):
catalina.out
05-Aug-2021 12:37:04.048 WARNING [main] org.apache.tomcat.util.digester.SetPropertiesRule.begin Match [Server/Service/Connector] failed to set property [ciphers] to [TLS_RSA_WITH_AES_256_GCM_SHA384,xxxxxxxxxxxxx]
05-Aug-2021 12:37:04.048 WARNING [main] org.apache.tomcat.util.digester.SetPropertiesRule.begin Match [Server/Service/Connector] failed to set property [keystoreFile] to [certs/keyStore.jks]
05-Aug-2021 12:37:04.018 WARNING [main] org.apache.tomcat.util.digester.SetPropertiesRule.begin Match [Server/Service/Connector] failed to set property [clientAuth] to [false]
05-Aug-2021 12:37:04.049 WARNING [main] org.apache.tomcat.util.digester.SetPropertiesRule.begin Match [Server/Service/Connector] failed to set property [keystoreType] to [jks]
05-Aug-2021 12:37:04.049 WARNING [main] org.apache.tomcat.util.digester.SetPropertiesRule.begin Match [Server/Service/Connector] failed to set property [keystorePass] to [xxxxxxxx]
05-Aug-2021 12:37:04.050 WARNING [main] org.apache.tomcat.util.digester.SetPropertiesRule.begin Match [Server/Service/Connector] failed to set property [sslEnabledProtocols] to [TLSv1.2]
05-Aug-2021 12:37:45.916 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent The Apache Tomcat Native library which allows using OpenSSL was not found on the java.library.path: [/usr/java/packages/lib/amd64:/usr/lib64:/lib64:/lib:/usr/lib]
05-Aug-2021 12:37:46.301 INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["https-jsse-nio-9443"]
05-Aug-2021 12:37:46.330 SEVERE [main] org.apache.catalina.util.LifecycleBase.handleSubClassException Failed to initialize component [Connector[org.apache.coyote.http11.Http11NioProtocol-9443]]
org.apache.catalina.LifecycleException: Protocol handler initialization failed
at org.apache.catalina.connector.Connector.initInternal(Connector.java:1054)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
at org.apache.catalina.core.StandardService.initInternal(StandardService.java:561)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
at org.apache.catalina.core.StandardServer.initInternal(StandardServer.java:1049)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
at org.apache.catalina.startup.Catalina.load(Catalina.java:747)
at org.apache.catalina.startup.Catalina.load(Catalina.java:769)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:305)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:475)
Caused by: java.lang.IllegalArgumentException: No SSLHostConfig element was found with the hostName [_default_] to match the defaultSSLHostConfigName for the connector [https-jsse-nio-9443]
server.xml
<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" />
-->
<Connector port="9443"
acceptCount="100"
clientAuth="false"
ciphers="TLS_RSA_WITH_AES_256_GCM_SHA384,xxxxxxxxxx"
connectionTimeout="20000"
disableUploadTimeout="true"
enableLookups="false"
keystoreFile="certs/keyStore.jks"
keystoreType="jks"
keystorePass="xxxxxxxx"
maxHttpHeaderSize="8192"
maxThreads="150"
minSpareThreads="25"
protocol="org.apache.coyote.http11.Http11NioProtocol"
scheme="https"
secure="true"
server=""
SSLEnabled="true"
sslEnabledProtocols="TLSv1.2"
URIEncoding="UTF-8"/>
<!-- Define an AJP 1.3 Connector on port 8009
<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" />
-->
Thanks,Chris
Re: Connector Port Issue
Posted by logo <lo...@kreuser.name>.
Chris,
> Am 11.08.2021 um 16:40 schrieb Chris Strickland <dr...@yahoo.com.invalid>:
>
>
> Anyone happen to know where in the server.xml file the attributes go for clientAuth and sslEnabledProtocols?
They goes in "protocols" and "certificateVerification" attributes of SSLHostConfig.
Like this:
<SSLHostConfig
hostName="${hostname}"
honorCipherOrder="true"
certificateVerification="none"
certificateRevocationListFile="${catalina.base}/conf/ssl/ca-bundle-client.crl"
truststoreFile="${catalina.base}/conf/ssl/cacerts.jks"
truststorePassword="changeit"
protocols="TLSv1.2+TLSv1.3"
ciphers="TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:!DSS">
<Certificate certificateKeystoreFile="${catalina.base}/conf/ssl/mycert_ecc.p12"
certificateKeystorePassword="xxx"
certificateKeyAlias="server_ecc"
type="EC" />
<Certificate certificateKeystoreFile="${catalina.base}/conf/ssl/mycert.p12"
certificateKeystorePassword="xxx"
certificateKeyAlias="server"
type="RSA" />
</SSLHostConfig>
> I'm running Tomcat 10. Seems like I tried putting them under everything (Connector, SSLHostConfig, Certificate) but still get the warning in the logs: failed to set property.
> Thanks,Chris On Thursday, August 5, 2021, 03:37:54 PM EDT, Peter Kreuser <lo...@kreuser.name> wrote:
>
> Chris,
>
>> Am 05.08.2021 um 18:32 schrieb Rob Sargent <rs...@xmission.com>:
>>
>>
>>> Caused by: java.lang.IllegalArgumentException: No SSLHostConfig element was found with the hostName [_default_] to match the defaultSSLHostConfigName for the connector [https-jsse-nio-9443]
>>>
>>
>
> The ssl-Options are not attributes on the connector, but the SSLHostConfig
>
> http://tomcat.apache.org/tomcat-10.0-doc/config/http.html#Common_Attributes
>
> http://tomcat.apache.org/tomcat-10.0-doc/config/http.html#SSL_Support
>
> Peter
>
>> Isn’t that the real issue?
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
Re: Connector Port Issue
Posted by Chris Strickland <dr...@yahoo.com.INVALID>.
Anyone happen to know where in the server.xml file the attributes go for clientAuth and sslEnabledProtocols? I'm running Tomcat 10. Seems like I tried putting them under everything (Connector, SSLHostConfig, Certificate) but still get the warning in the logs: failed to set property.
Thanks,Chris On Thursday, August 5, 2021, 03:37:54 PM EDT, Peter Kreuser <lo...@kreuser.name> wrote:
Chris,
> Am 05.08.2021 um 18:32 schrieb Rob Sargent <rs...@xmission.com>:
>
>
>> Caused by: java.lang.IllegalArgumentException: No SSLHostConfig element was found with the hostName [_default_] to match the defaultSSLHostConfigName for the connector [https-jsse-nio-9443]
>>
>
The ssl-Options are not attributes on the connector, but the SSLHostConfig
http://tomcat.apache.org/tomcat-10.0-doc/config/http.html#Common_Attributes
http://tomcat.apache.org/tomcat-10.0-doc/config/http.html#SSL_Support
Peter
> Isn’t that the real issue?
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
Re: Connector Port Issue
Posted by Chris Strickland <dr...@yahoo.com.INVALID>.
Thank you. I will check out the info.
chris
On Thursday, August 5, 2021, 03:37:54 PM EDT, Peter Kreuser <lo...@kreuser.name> wrote:
Chris,
> Am 05.08.2021 um 18:32 schrieb Rob Sargent <rs...@xmission.com>:
>
>
>> Caused by: java.lang.IllegalArgumentException: No SSLHostConfig element was found with the hostName [_default_] to match the defaultSSLHostConfigName for the connector [https-jsse-nio-9443]
>>
>
The ssl-Options are not attributes on the connector, but the SSLHostConfig
http://tomcat.apache.org/tomcat-10.0-doc/config/http.html#Common_Attributes
http://tomcat.apache.org/tomcat-10.0-doc/config/http.html#SSL_Support
Peter
> Isn’t that the real issue?
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
Re: Connector Port Issue
Posted by Peter Kreuser <lo...@kreuser.name>.
Chris,
> Am 05.08.2021 um 18:32 schrieb Rob Sargent <rs...@xmission.com>:
>
>
>> Caused by: java.lang.IllegalArgumentException: No SSLHostConfig element was found with the hostName [_default_] to match the defaultSSLHostConfigName for the connector [https-jsse-nio-9443]
>>
>
The ssl-Options are not attributes on the connector, but the SSLHostConfig
http://tomcat.apache.org/tomcat-10.0-doc/config/http.html#Common_Attributes
http://tomcat.apache.org/tomcat-10.0-doc/config/http.html#SSL_Support
Peter
> Isn’t that the real issue?
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
Re: Connector Port Issue
Posted by Rob Sargent <rs...@xmission.com>.
> Caused by: java.lang.IllegalArgumentException: No SSLHostConfig element was found with the hostName [_default_] to match the defaultSSLHostConfigName for the connector [https-jsse-nio-9443]
>
Isn’t that the real issue?
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org