B4J Question URGENT HELP !! ssl certificate

billyrudi

Active Member
Licensed User
Longtime User
Hi, i have a big problem import a ssl certificate. the certificate i a real crt file that i have uyed from an italian provider
i have import it with

keytool -keystore keystore -import -alias keystore -file 243084_www.solargs.it_generalsoft.crt -trustcacerts

but all clients reports to me this error

Connessione sicura non riuscita

Si è verificato un errore durante la connessione a solargs.it. Impossibile stabilire una connessione sicura con il peer: non esistono algoritmi crittografici in comune. Codice di errore: SSL_ERROR_NO_CYPHER_OVERLAP


b4j runtime mesage shows me
2018-02-26 09:01:15.820:INFOejs.Server:main: jetty-9.4.z-SNAPSHOT
....
2018-02-26 09:01:16.198:INFOejus.SslContextFactory:main: x509=X509@124411f(keystore,h=[www.solargs.it, solargs.it],w=[]) for SslContextFactory@1e7803(file:///D:/Solar/se/Objects/keystore,null)

2018-02-26 09:01:16.892:INFOejs.AbstractConnector:main: Started ServerConnector@c13091{SSL,[ssl, http/1.1]}{0.0.0.0:443}

the code to load ssl certificate is the stadard erel code...

B4X:
Private Sub ConfigureSSL (SslPort As Int)
    'example of SSL connector configuration
    Dim ssl As SslConfiguration
    ssl.Initialize
    Log(File.DirApp)
    ssl.SetKeyStorePath(File.DirApp, "keystore") 'path to keystore file
    ssl.KeyStorePassword = "solareclipse"
    ssl.KeyManagerPassword = "solareclipse"
     srvr.SetSslConfiguration(ssl, SslPort)
    'add filter to redirect all traffic from http to https (optional)
    srvr.AddFilter("/*", "HttpsFilter", False)
End Sub

I have no problem to start server if i put a temporary certificate created with

keytool -certreq -alias jetty -keystore keystore -file jetty.csr

instruction.

Erel i can send you my certs file to help me!!!

(

https://solargs.it/pilota?gs=***&Username=****&password=****

)

please this help is urgent!
 
Last edited:

Erel

B4X founder
Staff member
Licensed User
Longtime User
It doesn't look like you converted the certificate correctly.

See this answer: https://stackoverflow.com/a/11954816
You will need to install openssl first.

I'm pretty sure that I followed these instructions when setting the SSL certificate that runs on this server (https://b4x.com:51041/)
 
Upvote 0
Cookies are required to use this site. You must accept them to continue using the site. Learn more…