Confluence Timeout with SSL
Asked by Ingo Buyny:

Hi,

i\`m evaluating Confluence as locally hosted version and struggle with the ssl setup.

I have a ca issued wildcard certificate which i want to use. i created a keystore, imported the certificate, concatenated the intermediate and the root certificates and edited the server.xml. I followed this guide: <https://confluence.atlassian.com/doc/running-confluence-over-ssl-or-https-161203.html>

Unfortunately i can\`t access to the https site, i always get "Network Timeout error" whe i try to open confluence via https.

http still works fine.

Hope, someone can help a little bit :)


Answers:
author: Ingo Buyny
body: I got it.

i had different passwords for my keystore and the pfx file.

After i used the same password for both keystore and keypair it started working

comments: author: Joe Jadamec
body: I had the same problem for Crowd Server version 4.2.0,  
making the password the same for keystore and jks certificate worked.


author: thalesc
body: Hey Ingo, welcome to the community.

It looks like you have some issue in your tomcat settings (server.xml file).

When you changed the connector block as instructed in the KB article referred have you changed all the necessary parameters?

Have a look at your Catalina.out log file and see if it shows any errors when it tries to start tomcat.

comments: author: Ingo Buyny
body: This is my connector:

```
 <Connector port="8443" maxHttpHeaderSize="8192"
 maxThreads="150" minSpareThreads="25"
 protocol="org.apache.coyote.http11.Http11Nio2Protocol"
 enableLookups="false" disableUploadTimeout="true"
 acceptCount="100" scheme="https" secure="true"
 clientAuth="false" sslProtocol="TLSv1.2" sslEnabledProtocols="TLSv1.2" SSLEnabled="true"
 URIEncoding="UTF-8" keystorePass="password"
 keystoreFile="c:\Keystore\confluence.keystore"/>
```


author: Ingo Buyny
body: found this in the catalina log:

```
Caused by: java.lang.IllegalArgumentException: Get Key failed: Given final block not properly padded. Such issues can arise if a bad key is used during decryption.
 at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:114)
 at org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:85)
 at org.apache.tomcat.util.net.Nio2Endpoint.bind(Nio2Endpoint.java:155)
 at org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:1044)
 at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:540)
 at org.apache.coyote.http11.AbstractHttp11Protocol.init(AbstractHttp11Protocol.java:74)
 at org.apache.catalina.connector.Connector.initInternal(Connector.java:932)
```


author: Gonchik Tsymzhitov
body: Hi!

Any errors in the logs ?

Cheers,

Gonchik Tsymzhitov

comments: author: Ingo Buyny
body: I?m still new to this, so excuse me, i looked in the Windows Eventlog but i assume you mean Confluence logs?

Where can i find these?


author: Gonchik Tsymzhitov
body: Hi!

Pleease, have look in Confluence home directory

<https://confluence.atlassian.com/doc/working-with-confluence-logs-108364721.html>

Cheers,

Gonchik Tsymzhitov


author: Ingo Buyny
body: ok, found it in the meantime.

Which log is relevant? catalina?

please have a look at the other answer, i posted an error there from the catalina log which i assume to be relevant


Tags: certificate

confluence-server

https

keystore

server

ssl