For example I gave it as 2.keytool -certreq -keyalg RSA -alias tomcat -file csr.csr -keystore tpsynergy.keystore

Do not give your name, but use the domain name. While creating this, it will ask for first name and last name. Keytool -keysize 2048 -genkey -alias tomcat -keyalg RSA -keystore tpsynergy.keystore

From the same server where the certificate will be installed, create CSR.

So I created a new csr and obtained a new certificate and installed the same. After lot of research, I used this link to compare the csr (certificate signing request to the actual certificate). After importing the new server certificate and restarting the tomcat, the error we were getting was ERR_SSL_VERSION_OR_CIPHER_MISMATCH. I had the same issue while renewing the certificate for our server at.

Using Firefox 2.x (some people reported instances where 2.x worked but 3.x didn't):ĭisabling OCSP (Tool > Options > Advanced > Encryption > Validation)Įnsuring that the anti-virus/firewall of the client computer isn't blocking or scanning port 443 (https port) One hypothesis we have is that Firefox might be trying to establish a SSL 3.0 connection.but why?īased some Googling, we tried the following things, but without success: Our Apache server is configured to reject SSL 3.0 connections. All pages are encrypted using TLS 1.0 through an Apache 2.2.8 HTTP server with mod_nss. The Java EE application runs on a Tomcat 6.0.16 server. Firefox throws the error in both Windows and Fedora, so the problem doesn't appear to be tied to an OS. (Error code: ssl_error_no_cypher_overlap) Everything works fine anywhere from 1-30 minutes into the session.but eventually, the connection fails and the following error appears:Īn error occurred during a connection to 10.x.x.x.Ĭannot communicate securely with peer: no common encryption algorithm(s). My co-workers and I are having a problem using Firefox 3.0.6 to access a Java 1.6.0_11 web application we're developing.

Firefox 45.0 tweeks