Arch Linux

Micrrotox

Member

Registered: 2014-04-29

Posts: 6

I cant load my tomcat7 apache server when i use the protocol https

Hello people, im having problems to load my local server, for some reason i cant use the protocol "https", i get the error:

Error code: ssl_error_rx_record_too_long

SSL received a record that exceeded the maximum permissible length.

I look in my file /etc/tomcat7/conf/server.xml and i found this:

 <Connector port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8443" />
   
 <Connector executor="tomcatThreadPool"
               port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8443" />
    -->
    <!-- Define a SSL HTTP/1.1 Connector on port 8443
         This connector uses the BIO implementation that requires the JSSE
         style configuration. When using the APR/native implementation, the
         OpenSSL style configuration is required as described in the APR/native
         documentation -->

    <Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol"
                maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
                enableLookups="true" disableUploadTimeout="true"
                acceptCount="100" debug="0" scheme="https" secure="true"
                clientAuth="false" sslProtocol="TLS"
                SSLEnabled="true" />

Some people suggest that i have to descoment this line and add some atributes:

<Connector port="8443" maxHttpHeaderSize="8192" 
         maxThreads="150" minSpareThreads="25" maxSpareThreads="75" 
         SSLEnabled="true" enableLookups="false" disableUploadTimeout="true" 
         acceptCount="100" scheme="https" secure="true" 
         clientAuth="false" sslProtocol="TLS" keystoreFile="var/config/tomcat-keystore.jks"/>

Other people said that i have to change the file httpd-ssl.conf and add the name of my server, according to them it should be "localhost".

I have tried everything but i dont know why this is not working? maybe i have to open the port 8443 ... when i did a nmap to my local server .. it showed me that 8443 was close... maybe thats the last thing i have to do to make this work... can someone tell me if this problem can be resolved?

Thanks !!!