https://issues.apache.org/bugzilla/show_bug.cgi?id=47956

           Summary: ssl_error_internal_error_alert in firefox only,
                    dependent on jdk version
           Product: Tomcat 5
           Version: 5.5.26
          Platform: Sun
        OS/Version: Solaris
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Connector:HTTP
        AssignedTo: dev@tomcat.apache.org
        ReportedBy: nco2...@columbia.edu


Running Solaris 9, Tomcat 5.5.26. There's no Apache - Tomcat is serving itself. 

When I point JAVA_HOME to the 1.5.0_21 JDK, I have no problems. However, when I
start tomcat up using JDK 1.6.0_16, Firefox, but not Safari or IE, will report
the following error on https connection:

    Secure Connection Error
    An error occurred during a connection to mysite.com:8443.
    Peer reports it experienced an internal error.
    (Error code: ssl_error_internal_error_alert)

There's no error in catalina.out or any other error log that I can find when
this happens.

Here's our SSL conf stanza (with passwords removed):

           <Connector port="8443" maxHttpHeaderSize="8192"
               maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
               enableLookups="false" disableUploadTimeout="true"
               acceptCount="100" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS"
        keystoreFile="/path/to/my/keystore"
                keystorePass="somePass" />

We're using a JKS keystore. I thought that maybe jdk 1.6 didn't like 1.5's
keystore format, so I re-created the keystore using the JDK 1.6's keytool. It's
the same as before - if I start up tomcat using 1.5, there's no problem, but if
I then restart tomcat using 1.6, Firefox can't make an ssl connection.

Thanks for your time, and please let me know if you'd like any additional
information.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to