Hello everybody,
the last couple of days i've been struggling getting my SSL cert up and running.
I got my SHA 256 cert from comodo and followed the steps for the keystore. To only thing I changed is that I used COMODORSADomainValidationSecureServerCA.crt and COMODORSAAddTrustCA.crt instead of the UTN ones.
Error when loading the site...ERR_SSL_VERSION_OR_CIPHER_MISMATCH on Chrome and SSL_ERROR_NO_CYPHER_OVERLAP on Firefox (tested it on multiple machines, all with clear cache).
I then saw the tip of the ciphers in the server.xml, so I did that:
ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA"
The server.xml already had the right sslProtocols="TLSv1,TLSv1.1,TLSv1.2"
Stoped and started... error when loading...
I've recreated the keystore, another tip suggested using -keyalg RSA in the keytool script.
Still getting an error.
I'm running 5315 and with the default SSL it works.
I already contacted Comodo and they say that the issued SSL is alright.
Can somebody help me with this?