B4J Question Certificates SSL in b4J

[francisco duran]

Hello friends, I need your help, I am trying to configure the SSL certificate for a B4J server application. It works very well for me in http:// but if I configure it for https:// I always get the error I have tried in several ways to configure the certificates and I have not been able to.
I am using a bluehost VPS server.
I bought a certificate at ssl.com and it works for me on the root page, but when I try to access mine with the port number the certificate does not work.

I have reviewed various tutorials and ways to do it on B4X.com and nothing.

Does anyone know how to remove the error mentioned above?

Thank you so much

 

[Johan Hormaza]

[Server] SSL Connections

Starting from B4J v2.00 the server can listen to two ports, the standard insecure port (http) and a secure port (https). The default port for http is 80 and for https is 443. These ports are used when the url doesn't explicitly specify a port number. It is recommended to go over the Wikipedia...

www.b4x.com

 

[francisco duran]

Hello, I have already used that tutorial. I bought the certificate and registered it on my domain https://lev.jsb.mybluehost.me/

and it works fine

The page I need is at https://lev.jsb.mybluehost.me:10004 and the certificate does not work there, I get an error "ERR_SSL_PROTOCOL_ERROR"

The page is fine because it works without problem in
http://lev.jsb.mybluehost.me:10001 but it is not a secure page.

The problem is that I can't assign the certificate I have to the page :10004.
But the certificate is already active.

I need help.

 

[teddybear]

Not enough information to determine the problem.
How did you deploy your web app to bluehost VPS server? how did you generate the keystore file?
I guess that homepage webserver you are using is provided by bluehost, you want to link to B4J server using URL via https, mostly the problem is that the keystore file you generated by the certificate you bought is incorrect. I think you should give us more informition.

 

[francisco duran]

Hello, I have an application on a bluehost VPS server (Linux centos)

It works on http://lev.jsb.mybluehost.me:10001/ with no problem but no security.

I am trying to upload the page https://lev.jsb.mybluehost.me:10004 using the same certificate that I have in https://lev.jsb.mybluehost.me

I bought that certificate at ssl.com, it is not the original from bluehost

The page code is:

Sub AppStart (Args() As String)
    srvr.Initialize("srvr")
    srvr.AddWebSocket("/ws", "leaflet")
    srvr.AddHandler("/tableHelper", "TableHelper", False)
    
    srvr.Port = 10001
    ConfigureSSL(10004)
    srvr.Start
    StartMessageLoop
End Sub
Public Sub Filter(req As ServletRequest, resp As ServletResponse) As Boolean
    If req.Secure Then
        Return True
    Else
        resp.SendRedirect(req.FullRequestURI.Replace("http:", "https:") _
       .Replace(srvr.Port, srvr.SslPort))
        Return False
    End If
End Sub

Private Sub ConfigureSSL (SslPort As Int)
    'example of SSL connector configuration
    Dim ssl As SslConfiguration

    ssl.Initialize
    Log (File.DirApp)
    
    ssl.SetKeyStorePath(File.DirApp, "/www/certs/jetty.keystore") 'path to keystore file
    
    ssl.KeyStorePassword = "123456"
    ssl.KeyManagerPassword = "123456"
    
    srvr.SetSslConfiguration(ssl, SslPort)
    
    
    'add filter to redirect all traffic from http to https (optional)
    'srvr.AddFilter("/*", "HttpsFilter", False)
End Sub

The certificate is:

The code for register the certificate is:

keytool -keysize 2048 -genkey -alias jetty -keyalg RSA -keystore jetty.keystore

keytool -certreq -keyalg RSA -alias jetty -file lev.jsb.mybluehost.me.csr -keystore jetty.keystore

keytool -import -trustcacerts -alias AddTrustExternalCARoot -file addtrustexternalcaroot.crt -keystore jetty.keystore

keytool -import -trustcacerts -alias COMODORSAAddTrustCA -file comodorsaaddtrustca.crt -keystore jetty.keystore

keytool -import -trustcacerts -alias COMODORSADomainValidationSecureServerCA -file COMODORSADomainValidationSecureServerCA.crt -keystore jetty.keystore

keytool -import -trustcacerts -alias Recosfa -file lev.jsb.mybluehost.me.crt -keystore jetty.keystore

 

[Johan Hormaza]

he server configuration is done with SslConfiguration object. This code should be called before the server is stared.

 

[francisco duran]

Hello, this is how I am doing it, in line 7 I call the ConfigureSSL function, which is where I perform the SslConfiguration and after executing the entire function (ConfigureSSL) I start the service (Line 8)

 

[Johan Hormaza]

That's all wrong, why put the Filter event in the main module?

[Server] SSL Connections

Starting from B4J v2.00 the server can listen to two ports, the standard insecure port (http) and a secure port (https). The default port for http is 80 and for https is 443. These ports are used when the url doesn't explicitly specify a port number. It is recommended to go over the Wikipedia...

www.b4x.com

You must follow the clear steps that Erel dictates here!

Sub AppStart (Args() As String)
srvr.Initialize("srvr")
srvr.AddWebSocket("/ws", "leaflet")
srvr.AddHandler("/tableHelper", "TableHelper", False)

srvr.Port = 10001
ConfigureSSL(10004)
srvr.Start
StartMessageLoop
End Sub
Public Sub Filter(req As ServletRequest, resp As ServletResponse) As Boolean
If req.Secure Then
Return True
Else
resp.SendRedirect(req.FullRequestURI.Replace("http:", "https:") _
.Replace(srvr.Port, srvr.SslPort))
Return False
End If
End Sub

Private Sub ConfigureSSL (SslPort As Int)
'example of SSL connector configuration
Dim ssl As SslConfiguration

ssl.Initialize
Log (File.DirApp)

ssl.SetKeyStorePath(File.DirApp, "/www/certs/jetty.keystore") 'path to keystore file

ssl.KeyStorePassword = "123456"
ssl.KeyManagerPassword = "123456"

srvr.SetSslConfiguration(ssl, SslPort)


'add filter to redirect all traffic from http to https (optional)
'srvr.AddFilter("/*", "HttpsFilter", False)
End Sub

According to here I see that you are calling after initializing the server

 

[teddybear]

The code for register the certificate is:

keytool -keysize 2048 -genkey -alias jetty -keyalg RSA -keystore jetty.keystore

keytool -certreq -keyalg RSA -alias jetty -file lev.jsb.mybluehost.me.csr -keystore jetty.keystore

keytool -import -trustcacerts -alias AddTrustExternalCARoot -file addtrustexternalcaroot.crt -keystore jetty.keystore

keytool -import -trustcacerts -alias COMODORSAAddTrustCA -file comodorsaaddtrustca.crt -keystore jetty.keystore

keytool -import -trustcacerts -alias COMODORSADomainValidationSecureServerCA -file COMODORSADomainValidationSecureServerCA.crt -keystore jetty.keystore

keytool -import -trustcacerts -alias Recosfa -file lev.jsb.mybluehost.me.crt -keystore jetty.keystore

Where is your key pair file?

 

[francisco duran]

That's all wrong, why put the Filter event in the main module?

[Server] SSL Connections

Starting from B4J v2.00 the server can listen to two ports, the standard insecure port (http) and a secure port (https). The default port for http is 80 and for https is 443. These ports are used when the url doesn't explicitly specify a port number. It is recommended to go over the Wikipedia...

www.b4x.com

You must follow the clear steps that Erel dictates here!


View attachment 139818


According to here I see that you are calling after initializing the server

Hello, I already made the change but still the same.

The program works if I open it in http mode. Failure is when wanting to see the https port

 

[francisco duran]

Where is your key pair file?

Hi, I don't know what they are.
Could you guide me?
thank you

 

[teddybear]

Maybe it is the reason?

How to fix ERR_SSL_PROTOCOL_ERROR: causes, variations, and troubleshooting

The ERR_SSL_PROTOCOL_ERROR occurs when a website cannot provide a secure connection. Check out this article to learn how to resolve it.

www.hostinger.com

 

[francisco duran]

Hi, I just did everything that the page that sent me says and nothing, it's still the same. I don't think the problem is with the browser, I assume it's something I do wrong when I set the certificate in b4J.

On the page https://lev.jsb.mybluehost.me the certificate works fine.

But when I add https://lev.jsb.mybluehost.me:10004 to it that's where the error comes out.

help me

 

[teddybear]

Check the certificate if it is correct and whether B4J server could be accessed via https on localhost ?