users@glassfish.java.net

Re: Unable to install CAcert.org SSL certificate into GlassFish v3

From: Mo Maison <momaison_at_yahoo.fr>
Date: Wed, 21 Mar 2012 17:28:47 +0100

JDK7 added elliptic curve cryptography IIRC,
and glassfish may try to use the strongest cipher algo.
But I guess your cert contains an RSA key ?

Try it with JDK6, see if it works.
With JDK7, we had to disable some ciphers from
the allowed suites (ECC..., I do not remeber exactly).



Le 20/03/2012 16:30, forums_at_java.net a écrit :
> Hi,
>
> I am trying to enable ssl on my internet glassfish server using my own
> CAcert.org certificate. I followed the introduction from Masoud Kalali :
>
> http://weblogs.java.net/blog/kalali/archive/2010/02/27/how-install-godaddy-certificate-your-glassfish-v3
>
> [1]
>
> But after all when I try to connect to my ssl port I got the server error
> message posted below.
>
> Can anybody help me please what the message "SSL configuration is
> invalid due
> to No available certificate or key corresponds to the SSL cipher
> suites which
> are enabled." means?. Could it be possible that a certificate created
> with
> CAcert.org is not accapteble for glassfish?
>
> [code]
> [#|2012-03-20T16:21:00.289+0100|WARNING|glassfish3.1|com.sun.grizzly.config.GrizzlyServiceListener|_ThreadID=18;_ThreadName=Thread-1;|GRIZZLY0007:
>
> SSL support could not be configured!
>
> java.io.IOException: SSL configuration is invalid due to No available
> certificate or key corresponds to the SSL cipher suites which are
> enabled.
>
> at
> com.sun.grizzly.util.net.jsse.JSSE14SocketFactory.checkConfig(JSSE14SocketFactory.java:455)
>
>
> at
> com.sun.grizzly.util.net.jsse.JSSE14SocketFactory.init(JSSE14SocketFactory.java:183)
>
>
> at
> com.sun.grizzly.config.SSLConfigHolder.initializeSSL(SSLConfigHolder.java:361)
>
>
<snip>