I’m working with apache and tomcat server in ubuntu server with a web app made of web pages and websockets. Web pages are served from Apache HTTPD and tomcat serves websockets. Both use the same L.E. SSL certificate. Apache well works with HTTPS but I found a problem with websockets. If I use Chr…

Could you please mention the actual domain instead of “ my.website.com ”?

If the site is “offline” or you are just overly paranoid (but then you probably shouldn’t have your server on the Internet), you could try showing the output of: openssl s_client -connect my.website.com:8443 -servername my.website.com

My domain is demo.cinebot.it the websockets starts after login so you can only see the certificate provided by Tomcat from this url: https://demo.cinebot.it:8443/ as HTTPS not as WSS, but the certificate is the same.

Seems like you don’t offer the certificate chain, just the leaf certificate. Try to point your Apache to fullchain.pem or include the Lets Encrypt intermediate in your certificate.

I confirm that tomcat was using only cert.pem and not the full chain. I changed my server.xml configuration adding SSLCertificateChainFile with chain.pem file. Now this is the output of openssl command: CONNECTED(00000003) --- Certificate chain 0 s:/CN=demo.cinebot.it i:/C=US/O=Let's Encrypt/C…

Not sure if it is part of the problem, but I found these lines to be of Interest: Server Temp Key: DH, 1024 bits Using 1024 bits is considered insecure. Increase DH prime size or remove DHE ciphers. Client Certificate Types: RSA sign, DSA sign, ECDSA sign Requested Signature Algorithms: RSA+SH…

How could you find this details? Unfortunartely I cannot understand what your talking about, but this is my tomcat configuration: <Connector protocol="org.apache.coyote.http11.Http11AprProtocol" port="8443" maxThreads="200" scheme="https" secure="true" SSLEnabled="…

Yes, it seem to missing: SSLHonorCipherOrder SSLCipherSuite But I’m not sure about their proper syntax for Tomcat. Maybe a quick search can find those answers. Try: https://tomcat.apache.org/tomcat-7.0-doc/config/http.html#SSL_Support

[image] Please Put Technology Stacks in Headers - Makes It Easy to help Site Feedback H… this has been discussed before [image] Secure WebSockets with Tomcat Servers Server H… Andrei

I tried to add these entries coping their values from Apache configuration, but the problem is still here.

Configuring Secure Websockets with Tomcat - HTTPS fails with Chrome but works with Firefox

Help

ahaw021 October 26, 2017, 8:23pm 12

this has been discussed before

Andrei

Topic		Replies	Views
Setting up SSL on Tomcat Help	3	1454	June 20, 2018
SSLForFree's and Certbot's SSL certs dont work in firefox websocket connection Help	13	1579	July 15, 2020
Letsencrypt certificate with Tomcat and Certbot connection refused Help	27	14826	December 19, 2017
Secure WebSockets with Tomcat Servers Server	16	8880	June 28, 2017
How to use the certificate for Tomcat Server	46	90257	November 11, 2017

Configuring Secure Websockets with Tomcat - HTTPS fails with Chrome but works with Firefox

Related topics