Confluence Timeout with SSL

[Ingo Buyny]

Hi,

i`m evaluating Confluence as locally hosted version and struggle with the ssl setup.

I have a ca issued wildcard certificate which i want to use. i created a keystore, imported the certificate, concatenated the intermediate and the root certificates and edited the server.xml. I followed this guide: https://confluence.atlassian.com/doc/running-confluence-over-ssl-or-https-161203.html

Unfortunately i can`t access to the https site, i always get "Network Timeout error" whe i try to open confluence via https.

http still works fine.

Hope, someone can help a little bit :)

[Ingo Buyny · Accepted solution]

I got it.

i had different passwords for my keystore and the pfx file.

After i used the same password for both keystore and keypair it started working

[Joe Jadamec]

I had the same problem for Crowd Server version 4.2.0,
making the password the same for keystore and jks certificate worked.

[thalesc]

Hey Ingo, welcome to the community.

It looks like you have some issue in your tomcat settings (server.xml file).

When you changed the connector block as instructed in the KB article referred have you changed all the necessary parameters?

Have a look at your Catalina.out log file and see if it shows any errors when it tries to start tomcat.

[Ingo Buyny]

This is my connector:

 <Connector port="8443" maxHttpHeaderSize="8192"
 maxThreads="150" minSpareThreads="25"
 protocol="org.apache.coyote.http11.Http11Nio2Protocol"
 enableLookups="false" disableUploadTimeout="true"
 acceptCount="100" scheme="https" secure="true"
 clientAuth="false" sslProtocol="TLSv1.2" sslEnabledProtocols="TLSv1.2" SSLEnabled="true"
 URIEncoding="UTF-8" keystorePass="password"
 keystoreFile="c:\Keystore\confluence.keystore"/>

[Ingo Buyny]

found this in the catalina log:

Caused by: java.lang.IllegalArgumentException: Get Key failed: Given final block not properly padded. Such issues can arise if a bad key is used during decryption.
 at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:114)
 at org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:85)
 at org.apache.tomcat.util.net.Nio2Endpoint.bind(Nio2Endpoint.java:155)
 at org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:1044)
 at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:540)
 at org.apache.coyote.http11.AbstractHttp11Protocol.init(AbstractHttp11Protocol.java:74)
 at org.apache.catalina.connector.Connector.initInternal(Connector.java:932)

[Gonchik Tsymzhitov]

Hi! 

Any errors in the logs ?

Cheers,

Gonchik Tsymzhitov

[Ingo Buyny]

I´m still new to this, so excuse me, i looked in the Windows Eventlog but i assume you mean Confluence logs?

Where can i find these?

[Gonchik Tsymzhitov]

Hi! 

Pleease, have look in Confluence home directory

https://confluence.atlassian.com/doc/working-with-confluence-logs-108364721.html

Cheers,

Gonchik Tsymzhitov

[Ingo Buyny]

ok, found it in the meantime.

Which log is relevant? catalina?

please have a look at the other answer, i posted an error there from the catalina log which i assume to be relevant