SSL Server certificate issued to Tomcat server generates errors
3 years ago
Originally Published: 2005-12-21
Article Number
000056407
Applies To
RSA Certificate Manager 6.6
Sun Solaris 2.9
Apache Tomcat
Vandis Netscaler 9000 gateway
Issue
SSL Server certificate issued to Tomcat server generates errors
Solaris machine with JBoss using the certificate to send data over HTTPS. Approved.auth.keystore is a Java Keystore that was created with the server.cert and the 4 CA certificates to create the Trusted CA Chain.

2005-12-12 16:00:51,315 ERROR

[org.apache.tomcat.util.net.PoolTcpEndpoint] Endpoint [SSL: ServerSocket addr=/0.0.0.0,port=0,localport=8443]] ignored exception:

java.net.SocketException: SSL handshake

errorjavax.net.ssl.SSLException: No available certificate corresponds to the SSL cipher suites which are enabled.

java.net.SocketException: SSL handshake

errorjavax.net.ssl.SSLException: No available certificate corresponds to the SSL cipher suites which are enabled.

at

org.apache.tomcat.util.net.jsse.JSSESocketFactory.acceptSocket

(JSSESocketFactory.java:113)

at org.apache.tomcat.util.net.PoolTcpEndpoint.acceptSocket

(PoolTcpEndpoint.java:368)

at org.apache.tomcat.util.net.TcpWorkerThread.runIt

(PoolTcpEndpoint.java:549)

at org.apache.tomcat.util.threads.ThreadPool

$ControlRunnable.run(ThreadPool.java:683)

at java.lang.Thread.run(Thread.java:534)

2005-12-12 16:00:51,317 WARN

[org.apache.tomcat.util.net.PoolTcpEndpoint] Reinitializing ServerSocket
Resolution
To correct this issue, create keystore with Java 1.5.0.06 and length of 2048 based on the Java supported key length documentation http://java.sun.com/j2se/1.4.2/docs/guide/security/jsse/JSSERefGuide.html for the RSA algorithm.