Re: [jetty-users] ERR_SSL_VERSION_OR_CIPHER_MISMATCH

[Joakim Erdfelt <joakim@xxxxxxxxxxx>]

Which version of Java? 

(Make sure you are running the latest JVM, as that's a requirement for SSL/TLS.  Pay attention to the JVM release notes and follow the JVM expiration notices!)

What are the security details of ducc.crt? 

(DSA? RSA? what bitlength? What type of certificate? does your start.ini configuration indicate this type if nor jks?  - 

hint, DSA is a no-go anymore, and a bitlength under 2048 will fail too)

Joakim Erdfelt / joakim@xxxxxxxxxxx

On Fri, Feb 24, 2017 at 6:49 AM, Lou DeGenaro <lou.degenaro@xxxxxxxxx> wrote:

2017-02-24 08:05:25.900:INFO:oejs.Server:main: jetty-9.4.2.v20170220

I created a folder for my webapp called "test" and put my "Hello World" index.html in it.  http serves it just fine, thank you.  https no so much.

Chromium says: ERR_SSL_VERSION_OR_CIPHER_MISMATCH
FireFox says:  SSL_ERROR_NO_CYPHER_OVERLAP

I created the keystore like so:

keytool -keystore keystore -import -alias jetty -file ducc.crt

I edited the start.ini file with the keystore password for both jetty.keystore.password and jetty.truststore.password.

I've made no other changes to the jetty that I downloaded.

I'm a bit out of my comfort zone here, so it's likely that I'm doing something wrong.  Please advise.

Thanks.

Lou.

_______________________________________________
jetty-users mailing list
jetty-users@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/jetty-users