Hi,
I have installed Confluence on a Docker container with a Confluence server license. I have tried to renew the certificates with Let's Encrypt, but I get the following error when I am trying to access the Confluence page: PR_END_OF_FILE_ERROR.
I have generated the certificates using the following commands:
openssl pkcs12 -export -in cert.pem -inkey privkey.pem -out cert_and_key.p12 -name tomcat -CAfile chain.pem -caname root
keytool -importkeystore -destkeystore MyDSKeyStore.jks -srckeystore cert_and_key.p12 -srcstoretype PKCS12 -srcstorepass <password> -alias tomcat
keytool -import -trustcacerts -alias root -file chain.pem -keystore mykey.jks
Until 3 months this way was working fine.
Any idea of why it is not working?
Where did you get that error from? I've seen it before when I've had problems using Firefox to connect to a https based service, but only coming from the browser.
The error from Firefox is not really very helpful, it's actually not reading a file that is chopped off before it ends, it's really reading a list of certificates and ciphers to find a pair that works with the service, not finding any, and then reaching the end of the list. But it might not be just the list that Firefox is working through, there may be something else telling it that a valid cert/cipher pair is not valid.
Your setup commands look ok to me, I'd expect them to work, but I'd want to check that they are installing the right certificates in the right places in the right way. Most importantly, which key store you have added them to - it needs to be the key store that the user account that is running Confluence uses, when running the Java virtual machine that Confluence runs in.
My usual mistake is to install certs in the system's install of Java, rather than the Java that Jira/Confluence/Bitbucket uses.
The other problems you might be having are:
Could you try an "incognito" session in Firefox to rule most of those out? Or better, try a different browser, ideally a recent version of a standards-compatible browser with clean install (no extensions or config tweaks - any of the big name browsers other than Internet Explorer)
Hi Nic,
Thanks for the reply.
Indeed, just Firefox throws this error, others were showing ERR_CONNECTION_CLOSED.
The problem was that I was generating the JKS on machine that had a different JAVA version than on the machine that hosts Confluence.
Issue is solved now.
Thank you,
Dan
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Online forums and learning are now in one easy-to-use experience.
By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.