B4J Question [Solved] [ABMaterial] - using https (secure)

[Harris]

myApp.StartServerHTTP2(srvr, "srvr", port, 443,"keystore","b12xxxxx","b12xxxxx" ) ' port = 51046
Is this correct?


I purchased SSL cert from SSLs.com (namecheap)...

I had my VPS provider setup the certs on my VPS.
I created a keystore (named keystore) according to this command - and answering questions...

keytool -keystore keystore -alias jetty -genkey -keyalg RSA

Updated server with new jar and rebooted. The jar did start on the server, however
now I can't run the app in my browser.

 

[OliverA]

Root, Intermediate(s) and the End Entity (from the above link): All these (if they apply) you should be able to download from Sectigo

 

[Harris]

That is what I got from SSLs.com - my cert files...

 

[Harris]

Where are you getting this from? Accessing https://comcrimewatch.com or https://comcrimewatch.com:51047/ccwatch/HomePage

https://comcrimewatch.com:51047/ccwatch/HomePage/

It is the info box on why my ssl is not valid...

 

[OliverA]

open the bundle with a text editor and see if you see several begin/end certificates

 

[OliverA]

Try this:

keytool -import -trustcacerts -alias mykey -file 223892800.crt -keystore domain.keystore

Update: change domain.keystore to your keystore name!!!!!

 

[Harris]

open the bundle with a text editor and see if you see several begin/end certificates

Yes i do, 2 in the bundle.. Bunch of jibberish text in between...

 

[OliverA]

I hope someone else can step in now (I'm going to be offline for awhile). Looks like you have a valid .crt file and the associated "chain" via the PEM files (the .ca-bundle) file. That should be enough info for someone with keystore chops (not me btw) to help you out (if post #45 did not do the trick).

 

[Harris]

This site can’t provide a secure connection
comcrimewatch.com uses an unsupported protocol.

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

keytool -import -trustcacerts -alias mykey -file 223892800.crt -keystore domain.keystore

changed to ccw.keystore

 

[Harris]

I hope someone else can step in now (I'm going to be offline for awhile). Looks like you have a valid .crt file and the associated "chain" via the PEM files (the .ca-bundle) file. That should be enough info for someone with keystore chops (not me btw) to help you out (if post #45 did not do the trick).

Thanks for your effort. This is a real challenge - yet somehow I think it does not need be...

If nothing else, this thread will be on Erels top ten Sunday report...

 

[OliverA]

quick: ssl check shows:

No SSL certificates were found on comcrimewatch.com. Make sure that the name resolves to the correct server and that the SSL port (default is 443) is open on your server's firewall.

Make sure the keystore is in the right place

 

[Harris]

quick: ssl check shows:

Make sure the keystore is in the right place

It is in the File.DirApp - right by my jar...

What would be "the right place"?

 

[prajinpraveen]

you can PM me. I just set up SSL from Namecheap using ABM
I also got those two files ( Bundle and cert )

 

[OliverA]

you can PM me. I just set up SSL from Namecheap using ABM
I also got those two files ( Bundle and cert )

Want to write a short tutorial?

 

[Harris]

root@hwsrv-206966:/var/www# ufw status verbose
Status: inactive

UFW - the firewall is inactive on my server.
Should It be active?

 

[XbNnX_507]

That is what I got from SSLs.com - my cert files...

Hi, use this https://keystore-explorer.org/ to generate the keystore with the supplied files...

 

[Harris]

Other than @prajinpraveen , has ANYONE else had success setting up your ABM VPS to use ssl?
I would attach a picture of the patch of my hair I ripped out - but I am already bald (from MS development products frustration).
Want to help me out? Get me a gun so I can end this misery... My PC or me - something has got to go...

 

[XbNnX_507]

Other than @prajinpraveen , has ANYONE else had success setting up your ABM VPS to use ssl?
I would attach a picture of the patch of my hair I ripped out - but I am already bald (from MS development products frustration).
Want to help me out? Get me a gun so I can end this misery... My PC or me - something has got to go...

I just did.... With Let's Encrypt certificate...
You need to use https://keystore-explorer.org/

 

[Harris]

Ok, I will try - as I have looked at it. What do I have to loose (seems nothing at this point)?
Do you have a Linux or Windows server?
The attached image does not say much - what is it trying to state?

I have Ubuntu 18.04 LTS (updated to all new patches).
@prajinpraveen has a WIndows server - where it seemed to work. Seems Linux is ( a wee bit ) different to make it work...

 

[XbNnX_507]

Do you have a Linux or Windows server?

i have a linux server Ubuntu VPS.

The attached image does not say much - what is it trying to state?

You asked who else had experience setting up ssl...

Seems Linux is ( a wee bit ) different to make it work...

Is the same...

Are you using java 8 or 9?
Be aware you need to modify ABMApplication if you use java 8 ( as i do )..

 

[Harris]

Why oh why do I have such an issue? Seems simple enough - yet I flounder.
I will try your suggestion.

Did you get the Windows version or The ubuntu of the explorer app?
If you installed it on your linux server - how did you run it?

Sorry to pest, but you can see where I am at...

When I get this cased, I will write a simple tutorial so NO ONE has to go thru this hell again.