1 Reply Latest reply on Feb 17, 2008 2:40 PM by Pete Muir

    problem with https : tries to display the page and eventuall

    Vincent LAUGIER Newbie

      Hello,

      I am trying to enforce for the first time some https redirection for some pages of my application.

      The EAP is 4.2.0.GA_CP01 and the application is a seam 1.2.1 application

      For the moment we only want the login page to be in https

      Here is an extract of pages.xml

       <page view-id="/login.xhtml" scheme="https" />
      
       <page view-id="/home.xhtml" >
       <restrict>#{identity.loggedIn}</restrict>
       </page>
      


      We have modify the server.xml as follow (cf http://docs.jboss.com/jbossas/guides/webguide/r2/en/html/ch9.https.sect.html)
      <Connector port="443" address="${jboss.bind.address}" maxThreads="100"
       minSpareThreads="5" maxSpareThreads="15" scheme="https"
       secure="true" clientAuth="false"
       keystoreFile="${jboss.server.home.dir}/conf/jboss.keystore"
       keystorePass="DeR6p3d" sslProtocol="TLS"/>
      
      [...]
      
      <Host name="bbppbiz" autoDeploy="false" deployOnStartup="false"
       deployXML="false">
       <Alias>www.bbppbiz.com</Alias>
       <Alias>bbppbiz.com</Alias>
      
       <Valve className="org.apache.catalina.valves.AccessLogValve"
       prefix="things" suffix=".log" pattern="common"
       directory="${jboss.server.home.dir}/log"/>
      
       <DefaultContext cookies="true" crossContext="true" override="true"/>
       </Host>
      


      and put the keystore file, CSR file, and certification files (the three .cer provided by https://www.certificat.com a french certification company) in /opt/JBOSS/jboss-eap-4.2/jboss-as/server/default/conf/

      # ls -l /opt/JBOSS/jboss-eap-4.2/jboss-as/server/default/conf/
      total 308
      -rw-r--r-- 1 jboss jboss 1546 Feb 8 17:36 AC_CERTINOMIS_SSL.cer
      -rw-r--r-- 1 jboss jboss 1320 Feb 8 16:33 Certificat_Racine_Certplus_Primary_CA_Class_2.cer
      -rw-r--r-- 1 jboss jboss 1631 Feb 8 16:33 Certificat_SSL.cer
      -rw-r--r-- 1 jboss jboss 8682 Sep 13 23:07 jbossjta-properties.xml
      -rw-r--r-- 1 jboss jboss 1363 Feb 8 17:12 jboss.keystore
      -rw-r--r-- 1 jboss jboss 10985 Sep 13 23:07 jboss-log4j.xml
      -rw-r--r-- 1 jboss jboss 7606 Sep 13 23:07 jboss-minimal.xml
      -rw-r--r-- 1 jboss jboss 37281 Sep 13 23:07 jboss-service.xml
      -rw-r--r-- 1 jboss jboss 662 Feb 8 17:13 jboss_ssl.csr
      -rw-r--r-- 1 jboss jboss 194 Sep 13 23:07 jndi.properties
      -rw-r--r-- 1 jboss jboss 7019 Sep 13 23:07 login-config.xml
      drwxr-xr-x 2 jboss jboss 4096 Sep 13 23:08 props
      -rw-r--r-- 1 jboss jboss 116976 Sep 13 23:07 standardjbosscmp-jdbc.xml
      -rw-r--r-- 1 jboss jboss 70236 Sep 13 23:07 standardjboss.xml
      drwxr-xr-x 2 jboss jboss 4096 Sep 13 23:08 xmdesc
      


      When I try to access the application in http (you can try, it is online) :
      http://www.bbppbiz.com

      the browser tries to connect for 30s and eventually make the redirection to https (https://bbppbiz.com/home.seam?cid=1) and print the following error message (in FF)

      The connection was interrupted
      
      The connection to bbppbiz.com was interrupted while the page was loading.
      
      
       * The site could be temporarily unavailable or too busy. Try again in a few
       moments.
      
       * If you are unable to load any pages, check your computer's network
       connection.
      
       * If your computer or network is protected by a firewall or proxy, make sure
       that Iceweasel is permitted to access the Web.
      


      Also, it is not a problem of firewall, the port 443 is opened

      I hope someone has a hint about this

      regards