users@glassfish.java.net

Re: Glassfish 3.1.1 https-listener for a cluster not working

From: Bernhard Thalmayr <bernhard.thalmayr_at_painstakingminds.com>
Date: Tue, 10 Jan 2012 08:36:12 +0100

Well this means that the you can successfullyl establish an SSL connection
to this server and so the server has a working secure socket.

Either the link in the 'launch' page does not point to the correct server
or your browser does not know how to connect to it (proxy issue?).

-Bernhard

On Mon, Jan 9, 2012 at 9:06 PM, <forums_at_java.net> wrote:

> Hello Bernhard,
>
> Thanks for the help.
>
> I can't telnet to that port. When I ran "openssl s_client -connect
> hostname:28181", I got the following:
>
>
>
> CONNECTED(00000003)
> depth=0 C = US, ST = California, L = Santa Clara, O = Oracle Corporation,
> OU
> = GlassFish, CN = xxx.yyy.com
> verify error:num=18:self signed certificate
> verify return:1
> depth=0 C = US, ST = California, L = Santa Clara, O = Oracle Corporation,
> OU
> = GlassFish, CN = xxx.yyy.com
> verify return:1
> ---
> Certificate chain
> 0 s:/C=US/ST=California/L=Santa Clara/O=Oracle
> Corporation/OU=GlassFish/CN=xx**x.yyy.com <http://xxx.yyy.com>
> i:/C=US/ST=California/L=Santa Clara/O=Oracle
> Corporation/OU=GlassFish/CN=xx**x.yyy.com <http://xxx.yyy.com>
> ---
> Server certificate
> -----BEGIN CERTIFICATE-----
> MIIDxTCCAq2gAwIBAgIEZgJFtjANBg**kqhkiG9w0BAQsFADCBkjELMAkGA1UE**BhMC
> VVMxEzARBgNVBAgTCkNhbGlmb3JuaW**ExFDASBgNVBAcTC1NhbnRhIENsYXJh**MRsw
> GQYDVQQKExJPcmFjbGUgQ29ycG9yYX**Rpb24xEjAQBgNVBAsTCUdsYXNzRmlz**aDEn
> MCUGA1UEAxMeY3lnbnVzLnNvbGVvY2**9tbXVuaWNhdGlvbnMuY29tMB4XDTEy**MDEw
> OTE4NTk1MloXDTIyMDEwNjE4NTk1Ml**owgZIxCzAJBgNVBAYTAlVTMRMwEQYD**VQQI
> EwpDYWxpZm9ybmlhMRQwEgYDVQQHEw**tTYW50YSBDbGFyYTEbMBkGA1UEChMS**T3Jh
> Y2xlIENvcnBvcmF0aW9uMRIwEAYDVQ**QLEwlHbGFzc0Zpc2gxJzAlBgNVBAMT**HmN5
> Z251cy5zb2xlb2NvbW11bmljYXRpb2**5zLmNvbTCCASIwDQYJKoZIhvcNAQEB**BQAD
> ggEPADCCAQoCggEBAKbcEqvd1lGSwD**8Sz9pR8gPRA9V7ZR8I5i1hWmLANenF**ZOPA
> M5T3lcek0pHAIoW0herh724+**7aXqWkRVYieYfv28sJbkdpOX1Xea5M**msCOWEzb3J
> guSNPJ8DrWUiclJkae3jzt9pRZW/**Gf7jiolk6PO1Z5f2y7Gtx2Ft7YCZPm**krPble
> HYQE0TlOKTbq8O77Bc0qjmzLEKps5s**YbXFOkwtPGDli1XS4X9MDO/**4EEwFyiUTzd
> /v05Jzo8XvYXHHoDu+**fzRVxSgvOWriAxrLoV9eN67KJnTZEZ**QQIo2J6wNYdhaXR7
> Q1LyUfollVhT2hSHg01fyz2dph7Dpl**fIR8FJal0CAwEAAaMhMB8wHQYDVR0O**BBYE
> FOHiqai91PM/**cxLL1CidbsudISJ4MA0GCSqGSIb3DQ**EBCwUAA4IBAQA3J6vnhUSg
> wVNon3qqkaMGFX/4VX7G0+**voPZ8zF9cRmtV/**Ck8TnrIe2MvsSkSpIzstCU4p2FJr
> olW0fTspoZ9c5alNO+3vwk+**rH4tk8YAc+**jiNVcvN4ofbH4wqYb8Aj+**5xB4147xM3
> P1vnZ2mF+**nAMYxNquMVJJXRXTOZxJOukfAgXm9W**piluJPThlic4yo5/YJLIW/5QB
> 6wy3sTbIInK5iyfcSrrHPa68iJ8Z29**i8HDbQtCyWPUMPkZpoGhz+**1lhBCkFKqf7U
> bSLWBYBCXsK1E0PzGN6jql+**KYLYOxH4HrJkC8yWSxrxJd0tvP2iSg**v/Irza9Fw1V
> z8DPNlnBMV/w
> -----END CERTIFICATE-----
> subject=/C=US/ST=California/L=**Santa Clara/O=Oracle
> Corporation/OU=GlassFish/CN=xx**x.yyy.com <http://xxx.yyy.com>
> issuer=/C=US/ST=California/L=**Santa Clara/O=Oracle
> Corporation/OU=GlassFish/CN=xx**x.yyy.com <http://xxx.yyy.com>
> ---
> No client certificate CA names sent
> ---
> SSL handshake has read 1676 bytes and written 271 bytes
> ---
> New, TLSv1/SSLv3, Cipher is EDH-RSA-DES-CBC3-SHA
> Server public key is 2048 bit
> Secure Renegotiation IS supported
> Compression: NONE
> Expansion: NONE
> SSL-Session:
> Protocol : TLSv1
> Cipher : EDH-RSA-DES-CBC3-SHA
> Session-ID:
> 4F0B44F9E1F280DD851C942C929142**51F26B7DBB2B9E7EF964C9DDDF75D2**3DFF
> Session-ID-ctx:
> Master-Key:
> 6F149242508B69C8335ADBCF65EDA8**2D15EFA3F6E30DDA32E99C40C36F06**
> A621BB5B513D675304F5C12E062061**E728D8
> Key-Arg : None
> Krb5 Principal: None
> PSK identity: None
> PSK identity hint: None
> Start Time: 1326138618
> Timeout : 300 (sec)
> Verify return code: 18 (self signed certificate)
> ---
> read:errno=0
>
>
>
>
> --
>
> [Message sent by forum member 'wlin']
>
> View Post: http://forums.java.net/node/**881572<http://forums.java.net/node/881572>
>
>
>


-- 
IT-Consulting Bernhard Thalmayr
- Painstaking Minds -
83620 Vagen (Munich area)
Germany