Why does not it work ssl https

[Fred Kruger]

Hi, I can not understand why https does not work.

Here is what i did:

Test server.

1) Installed a certificate issued by mine CA

keytool -import -trustcacerts -file cert.cer -alias tomcat -keystore "/opt/atlassian/confluence/jre/lib/security/cacerts" -storepass changeit -noprompt

2)Fixed configuration file

<Connector port="8443" maxHttpHeaderSize="8192"
maxThreads="150" minSpareThreads="25"
protocol="org.apache.coyote.http11.Http11Nio2Protocol"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false" sslProtocols="TLSv1,TLSv1.1,TLSv1.2"
sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2" SSLEnabled="true"
URIEncoding="UTF-8" keystorePass="changeit" keystoreFile="/opt/atlassian/confluence/jre/lib/security/cacerts"/>

3)Changed the base url https://myname:8443 and restarted confluence.

In the end, I get ERR_CONNECTION_REFUSED. 

How to determine the cause? There is nothing in the logs.

I will be glad to any suggestions) Thanks

[repi · Accepted solution]

@Fred Kruger 

What is the format of the key file?
If in format # PKCS12 then the entry add keystoreType = "PKCS12".

[Fred Kruger]

You were right in java.security file i found the line keystore.type=pkcs12 . I added to file server.xml keystoreType = "PKCS12" but it did not help. I also tried this keyAlias="tomcat" but unsuccessfully (: Thanks

[Fred Kruger]

You pushed me to study the documentation of tomcat and it worked for me!) I changed the configuration, but https worked!

<Connector port="8443" maxHttpHeaderSize="8192"
maxThreads="150" minSpareThreads="25"
protocol="org.apache.coyote.http11.Http11Nio2Protocol"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false" sslProtocols="TLSv1,TLSv1.1,TLSv1.2"
sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2" SSLEnabled="true"
SSLCertificateFile="/mycert.cer"
SSLCertificateKeyFile="/my-key-rsa.key"/>