I have a tomcat server for which I needed a signed certificate. I generated a key using
openssl req -new -newkey rsa:2048 -nodes -out sample_bfc_org.csr -keyout sample_bfc_org.key -subj "/C=BD/ST=Dhaka/L=Dhaka/O=Bangladesh Finance Corporatiobn/OU=IT/CN=sample.bfc.org"
and then generated a CSR and sent it to my company admin.
They gave me back a CER file with the signed certificate and certificate chain.
But when I import the certificate file in tomcat, I am getting the following error:
This site can’t provide a secure connectionehls.bhbfc.org uses an unsupported protocol.
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Unsupported protocol
The client and server don't support a common SSL protocol version or cipher suite.
My tomcat server.xml configuration is as follows:
<Connector executor="tomcatThreadPool"
port="443"
protocol="org.apache.coyote.http11.Http11AprProtocol"
connectionTimeout="20000"
acceptCount="100"
maxKeepAliveRequests="15"
SSLCACertificateFile="${catalina.base}/SSL/DigiCertCA.crt"
SSLCertificateFile="${catalina.base}/SSL/sample_bfc_org.crt"
SSLCertificateKeyFile="${catalina.base}/SSL/sample_bfc_org.key"
SSLPassword="123456"
SSLEnabled="true"
scheme="https"
secure="true"
sslProtocol="TLS"
/>
But still, the error exists. What can I do to solve the following error?
This site can’t provide a secure connectionehls.bhbfc.org uses an unsupported protocol.
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Unsupported protocol
The client and server don't support a common SSL protocol version or cipher suite.