Ubuntu 和 Tomcat 中的 SSL 錯誤

Question

I am new to SSL, trying to enable it in Tomcat, but I have folowing error showing up by firefox, when accesing https://localhost:8443/ :

An error occurred during a connection to localhost:8443.

SSL received a record that exceeded the maximum permissible length.

(Error code: ssl_error_rx_record_too_long)   

*   The page you are trying to view can not be shown because the authenticity of the received data could not be verified.

*   Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.

密鑰類型是 PKCS12 和 format.pfx，它是由我當地的銀行辦公室生成的，以備將來使用。

Tomcat 服務器。xml：

<Connector port="8443"
           maxHttpHeaderSize="8192"
           maxThreads="150"
           minSpareThreads="25"
           maxSpareThreads="75"
           enableLookups="false"
           disableUploadTimeout="true"
           acceptCount="100"
           scheme="https"
           secure="true"
           clientAuth="false"
           sslProtocol="TLS"
           keystoreFile="key.pfx"
           keystorePass="mypassword"
           keystoreType="PKCS12"/>

Answer 1

Tomcat 6 需要將Connector標簽的參數SSLEnabled設置為 true，才能啟用 SSL。 這很可能是 Firefox 報告的錯誤的原因，因為它可能在響應中接收 HTML 文檔並嘗試從它讀取假定的 SSL 有效負載。