users@glassfish.java.net

Re: Problem with GF and SSL: IE accepts certificate but Firefox doesn't

From: <glassfish_at_javadesktop.org>
Date: Mon, 07 Jan 2008 11:06:03 PST

Hello Jeanfrancois,

>...
> might be a bug in GlassFish. Can you switch your
> https port to listen
> using blocking socket? Just edit
> ${glassfish.home}/domains/domain1/config/domain.xml
> and set the
> blocking-enabled="true":
>
> <http-listener acceptor-threads="1"
> address="0.0.0.0"
> locking-enabled="true"
> default-virtual-server="server" enabled="true"
> family="inet" .... >
>
> and see if that works. Also what is your current ssl
> element
> configuration under your https lister (look for
> something like:
>

I made the proposed change, restarted Glassfish and visited again https://www.pluginsmithy.com:8181 with Firefox 2.0.0.11 on Linux. The symptoms haven't change, the certificate is still not recognized.

This are the current settings for the https listener in my domain.xml (I believe I haven't changed anything from the defaults except the "cert-nickname"):

<http-listener acceptor-threads="1" address="0.0.0.0" blocking-enabled="true" default-virtual-server="server" enabled="true" family="inet" id="http-listener-2" port="8181" security-enabled="true" server-name="" xpowered-by="true">
  <ssl cert-nickname="pluginsmithy" client-auth-enabled="false" ssl2-enabled="false" ssl3-enabled="true" tls-enabled="true" tls-rollback-enabled="true"/>
</http-listener>

Can I do anything else to troubleshoot this?

Thanks
Stephan
[Message sent by forum member 'smuehlst' (smuehlst)]

http://forums.java.net/jive/thread.jspa?messageID=252560