nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Confluence Timeout with SSL

Ingo Buyny

Hi,

i`m evaluating Confluence as locally hosted version and struggle with the ssl setup.

I have a ca issued wildcard certificate which i want to use. i created a keystore, imported the certificate, concatenated the intermediate and the root certificates and edited the server.xml. I followed this guide: https://confluence.atlassian.com/doc/running-confluence-over-ssl-or-https-161203.html

Unfortunately i can`t access to the https site, i always get "Network Timeout error" whe i try to open confluence via https.

http still works fine.

Hope, someone can help a little bit

Accepted answers

Ingo Buyny

I got it.

i had different passwords for my keystore and the pfx file.

After i used the same password for both keystore and keypair it started working

All comments

Gonchik Tsymzhitov

Hi!

Any errors in the logs ?

Cheers,

Gonchik Tsymzhitov

thalesc

Hey Ingo, welcome to the community.

It looks like you have some issue in your tomcat settings (server.xml file).

When you changed the connector block as instructed in the KB article referred have you changed all the necessary parameters?

Have a look at your Catalina.out log file and see if it shows any errors when it tries to start tomcat.

Ingo Buyny

I´m still new to this, so excuse me, i looked in the Windows Eventlog but i assume you mean Confluence logs?

Where can i find these?

Ingo Buyny

This is my connector:

 <Connector port="8443" maxHttpHeaderSize="8192"
 maxThreads="150" minSpareThreads="25"
 protocol="org.apache.coyote.http11.Http11Nio2Protocol"
 enableLookups="false" disableUploadTimeout="true"
 acceptCount="100" scheme="https" secure="true"
 clientAuth="false" sslProtocol="TLSv1.2" sslEnabledProtocols="TLSv1.2" SSLEnabled="true"
 URIEncoding="UTF-8" keystorePass="password"
 keystoreFile="c:\Keystore\confluence.keystore"/>

Gonchik Tsymzhitov

Hi!

Pleease, have look in Confluence home directory

https://confluence.atlassian.com/doc/working-with-confluence-logs-108364721.html

Cheers,

Gonchik Tsymzhitov

Ingo Buyny

ok, found it in the meantime.

Which log is relevant? catalina?

please have a look at the other answer, i posted an error there from the catalina log which i assume to be relevant

Ingo Buyny

found this in the catalina log:

Caused by: java.lang.IllegalArgumentException: Get Key failed: Given final block not properly padded. Such issues can arise if a bad key is used during decryption.
 at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:114)
 at org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:85)
 at org.apache.tomcat.util.net.Nio2Endpoint.bind(Nio2Endpoint.java:155)
 at org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:1044)
 at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:540)
 at org.apache.coyote.http11.AbstractHttp11Protocol.init(AbstractHttp11Protocol.java:74)
 at org.apache.catalina.connector.Connector.initInternal(Connector.java:932)

Ingo Buyny

I got it.

i had different passwords for my keystore and the pfx file.

After i used the same password for both keystore and keypair it started working

Joe Jadamec_gbfatu

I had the same problem for Crowd Server version 4.2.0,
making the password the same for keystore and jks certificate worked.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

server

confluence-server

ssl

https

certificate

keystore