Ubuntu 和 Tomcat 中的 SSL 错误

Question

I am new to SSL, trying to enable it in Tomcat, but I have folowing error showing up by firefox, when accesing https://localhost:8443/ :

An error occurred during a connection to localhost:8443.

SSL received a record that exceeded the maximum permissible length.

(Error code: ssl_error_rx_record_too_long)   

*   The page you are trying to view can not be shown because the authenticity of the received data could not be verified.

*   Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.

The key type is PKCS12 and format.pfx, and it was generated by my local bank office, for future use.

Tomcat server.xml:

<Connector port="8443"
           maxHttpHeaderSize="8192"
           maxThreads="150"
           minSpareThreads="25"
           maxSpareThreads="75"
           enableLookups="false"
           disableUploadTimeout="true"
           acceptCount="100"
           scheme="https"
           secure="true"
           clientAuth="false"
           sslProtocol="TLS"
           keystoreFile="key.pfx"
           keystorePass="mypassword"
           keystoreType="PKCS12"/>

Answer 1

Tomcat 6 requires the parameter SSLEnabled of theConnector tag to be set to true, in order to enable SSL. This is most likely the cause of the error reported by Firefox, for it might be receiving a HTML document in the response and attempting to read the supposed SSL payload off it.