SSL errors when accessing publically

[croydon.dias]

Hi guys,

I've setup Widlfy for SSL and everything works as expected when accessed through the internal network.

I have generated a self-signed certificate for this purpose (Will get one from Thawte in due course).

When I access the application publically, I get the following.

Any ideas as to why this is happening? is it because my self signed certificate is being rejected?

Server log:

2014-05-21 16:56:37,868 DEBUG [org.jboss.ejb.client.txn] (Periodic Recovery) Send recover request for transaction origin node identifier 1 to EJB receiver with node name gollum

2014-05-21 16:56:47,869 DEBUG [org.jboss.ejb.client.txn] (Periodic Recovery) Send recover request for transaction origin node identifier 1 to EJB receiver with node name gollum

2014-05-21 16:58:24,722 DEBUG [io.undertow.request.io] (default I/O-2) Error reading request: javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection?

        at sun.security.ssl.EngineInputRecord.bytesInCompletePacket(EngineInputRecord.java:171) [jsse.jar:1.7.0_55]

        at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:845) [jsse.jar:1.7.0_55]

        at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:758) [jsse.jar:1.7.0_55]

        at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624) [rt.jar:1.7.0_55]

        at org.xnio.ssl.JsseSslConduitEngine.engineUnwrap(JsseSslConduitEngine.java:641) [xnio-api-3.2.0.Final.jar:3.2.0.Final]

        at org.xnio.ssl.JsseSslConduitEngine.unwrap(JsseSslConduitEngine.java:588) [xnio-api-3.2.0.Final.jar:3.2.0.Final]

        at org.xnio.ssl.JsseSslConduitEngine.unwrap(JsseSslConduitEngine.java:543) [xnio-api-3.2.0.Final.jar:3.2.0.Final]

        at org.xnio.ssl.JsseSslStreamSourceConduit.read(JsseSslStreamSourceConduit.java:89) [xnio-api-3.2.0.Final.jar:3.2.0.Final]

        at org.xnio.conduits.ConduitStreamSourceChannel.read(ConduitStreamSourceChannel.java:127) [xnio-api-3.2.0.Final.jar:3.2.0.Final]

        at io.undertow.server.protocol.http.HttpReadListener.handleEvent(HttpReadListener.java:111)

        at io.undertow.server.protocol.http.HttpReadListener.handleEvent(HttpReadListener.java:46)

        at org.xnio.ChannelListeners.invokeChannelListener(ChannelListeners.java:92) [xnio-api-3.2.0.Final.jar:3.2.0.Final]

        at org.xnio.conduits.ReadReadyHandler$ChannelListenerHandler.readReady(ReadReadyHandler.java:66) [xnio-api-3.2.0.Final.jar:3.2.0.Final]

        at org.xnio.nio.NioSocketConduit.handleReady(NioSocketConduit.java:87) [xnio-nio-3.2.0.Final.jar:3.2.0.Final]

        at org.xnio.nio.WorkerThread.run(WorkerThread.java:531) [xnio-nio-3.2.0.Final.jar:3.2.0.Final]

2014-05-21 16:58:47,871 DEBUG [org.jboss.ejb.client.txn] (Periodic Recovery) Send recover request for transaction origin node identifier 1 to EJB receiver with node name gollum

2014-05-21 16:58:57,871 DEBUG [org.jboss.ejb.client.txn] (Periodic Recovery) Send recover request for transaction origin node identifier 1 to EJB receiver with node name gollum

2014-05-21 17:00:57,872 DEBUG [org.jboss.ejb.client.txn] (Periodic Recovery) Send recover request for transaction origin node identifier 1 to EJB receiver with node name gollum

2014-05-21 17:01:07,873 DEBUG [org.jboss.ejb.client.txn] (Periodic Recovery) Send recover request for transaction origin node identifier 1 to EJB receiver with node name gollum

2014-05-21 17:03:07,874 DEBUG [org.jboss.ejb.client.txn] (Periodic Recovery) Send recover request for transaction origin node identifier 1 to EJB receiver with node name gollum

2014-05-21 17:03:17,875 DEBUG [org.jboss.ejb.client.txn] (Periodic Recovery) Send recover request for transaction origin node identifier 1 to EJB receiver with node name gollum

2014-05-21 17:05:17,876 DEBUG [org.jboss.ejb.client.txn] (Periodic Recovery) Send recover request for transaction origin node identifier 1 to EJB receiver with node name gollum

2014-05-21 17:05:27,877 DEBUG [org.jboss.ejb.client.txn] (Periodic Recovery) Send recover request for transaction origin node identifier 1 to EJB receiver with node name gollum

[ctomc]

How does your configuration look like?

Also can you try with 8.1.0.CR2 as there ware some improvements in SSL area.

[croydon.dias]

I must add, the URL is being accessed like so https://xxx.xxx.xxx.xxx/webapp/index.jsp

Also https://xxx.xxx.xxx.xxx/ gives me the wildly startup page. So the server is able to serve pages.

Accessing it like so https://interalip/webapp/index.jsp works!

The server is run as me (non-root users_. had to use authbind so that it has access to ports 80/443

sudo touch /etc/authbind/byport/80

sudo chmod 755 /etc/authbind/byport/80

sudo chown croydond /etc/authbind/byport/80

sudo touch /etc/authbind/byport/443

sudo chmod 755 /etc/authbind/byport/443

sudo chown croydond /etc/authbind/byport/443

The server is run using:

authbind --deep ./standalone.sh -b=0.0.0.0. -bmanagement=0.0.0.0

The configuration is at http://pastebin.com/U9aPCUL2

The SSL key was created like so:

$JAVA_HOME/jre/bin/keytool -genkey -alias mycert -keyalg RSA -sigalg MD5withRSA -keystore server.keystore -storepass password -dname "cn=server" -keypass password -validity 9999

[croydon.dias]

So the issue was that the external router was not forwarding port 443 to the internal server.

Hence, why the application work using the internal IP and not the external one. :-)