4

I am new to SSL, trying to enable it in Tomcat, but I have folowing error showing up by firefox, when accesing https://localhost:8443/:

An error occurred during a connection to localhost:8443. SSL received a record that exceeded the maximum permissible length. (Error code: ssl_error_rx_record_too_long) * The page you are trying to view can not be shown because the authenticity of the received data could not be verified. * Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site. 

The key type is PKCS12 and format .pfx, and it was generated by my local bank office, for future use.

Tomcat server.xml:

<Connector port="8443" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" maxSpareThreads="75" enableLookups="false" disableUploadTimeout="true" acceptCount="100" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS" keystoreFile="key.pfx" keystorePass="mypassword" keystoreType="PKCS12"/> 

1 Answer 1

7

Tomcat 6 requires the parameter SSLEnabled of the Connector tag to be set to true, in order to enable SSL. This is most likely the cause of the error reported by Firefox, for it might be receiving a HTML document in the response and attempting to read the supposed SSL payload off it.

Sign up to request clarification or add additional context in comments.

6 Comments

I have enabled it, but now I'm getting this error: Certificate type not approved for application. (Error code: sec_error_inadequate_cert_type)
@hoss, that's easy. Appears to be a problem with the list of allowed activities for the certificate. You might have to regenerate the certificate, if you can. Or get a new one issued.
I have regenerated it via certmgr.msc in Windows, but no luck :(
When you view the properties of the certificate, do you see that it allows for "Server authentication"?
In proprietes under "Enhaced Key Usage" I see "Client Authentication" only
|

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.