B4J Question URGENT HELP !! ssl certificate

[billyrudi]

Hi, i have a big problem import a ssl certificate. the certificate i a real crt file that i have uyed from an italian provider
i have import it with

keytool -keystore keystore -import -alias keystore -file 243084_www.solargs.it_generalsoft.crt -trustcacerts

but all clients reports to me this error

Connessione sicura non riuscita

Si è verificato un errore durante la connessione a solargs.it. Impossibile stabilire una connessione sicura con il peer: non esistono algoritmi crittografici in comune. Codice di errore: SSL_ERROR_NO_CYPHER_OVERLAP


b4j runtime mesage shows me
2018-02-26 09:01:15.820:INFOejs.Server:main: jetty-9.4.z-SNAPSHOT
....
2018-02-26 09:01:16.198:INFOejus.SslContextFactory:main: x509=X509@124411f(keystore,h=[www.solargs.it, solargs.it],w=[]) for SslContextFactory@1e7803(file:///D:/Solar/se/Objects/keystore,null)

2018-02-26 09:01:16.892:INFOejs.AbstractConnector:main: Started ServerConnector@c13091{SSL,[ssl, http/1.1]}{0.0.0.0:443}

the code to load ssl certificate is the stadard erel code...

Private Sub ConfigureSSL (SslPort As Int)
    'example of SSL connector configuration
    Dim ssl As SslConfiguration
    ssl.Initialize
    Log(File.DirApp)
    ssl.SetKeyStorePath(File.DirApp, "keystore") 'path to keystore file
    ssl.KeyStorePassword = "solareclipse"
    ssl.KeyManagerPassword = "solareclipse"
     srvr.SetSslConfiguration(ssl, SslPort)
    'add filter to redirect all traffic from http to https (optional)
    srvr.AddFilter("/*", "HttpsFilter", False)
End Sub

I have no problem to start server if i put a temporary certificate created with

keytool -certreq -alias jetty -keystore keystore -file jetty.csr

instruction.

Erel i can send you my certs file to help me!!!

(

https://solargs.it/pilota?gs=***&Username=****&password=****

)

please this help is urgent!

 

[Erel]

It doesn't look like you converted the certificate correctly.

See this answer: https://stackoverflow.com/a/11954816
You will need to install openssl first.

I'm pretty sure that I followed these instructions when setting the SSL certificate that runs on this server (https://b4x.com:51041/)

 

[billyrudi]

Hi Erel
it works!!
tank you for your help!
On my mac i have use

brew install openssl

openssl pkcs12 -export -name servercert -in 243084_www.solargs.it_generalsoft.crt -inkey 243084_www.solargs.it_generalsoft.key -out myp12keystore.p12

keytool -importkeystore -destkeystore keystore.jks -srckeystore abc.p12 -srcstoretype pkcs12 -alias servercert