# Problem with ssl configuration in jboss **URL:** \ **Category:** Elasticsearch\ **Created:** [May 18, 2017, 6:47am UTC](https://discuss.elastic.co/t/problem-with-ssl-configuration-in-jboss/86203 "2017-05-18T06:47:42Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![muhammad\_safwan\_p](https://avatars.discourse-cdn.com/v4/letter/m/58f4c7/32.png) [@muhammad\_safwan\_p](https://discuss.elastic.co/u/muhammad_safwan_p)\ **Post date:** [May 18, 2017, 6:47am UTC](https://discuss.elastic.co/t/problem-with-ssl-configuration-in-jboss/86203/1 "2017-05-18T06:47:43Z")
**Creation of Certificate Authority and Server Certificates using Openssl and Java keystores** Create the Certificate Authority: ``` Generate CA key pair: openssl genrsa -aes256 -out ..\xyz_ca\private\ca.key.pem 4096 Verify CA password: openssl rsa -in ..\xyz_ca\private\ca.key.pem Generate CA root certificate: openssl req -new -x509 -days 3650 -key ..\xyz_ca\private\ca.key.pem -sha256 -extensions v3_ca -out ..\xyz_ca\cacert\ca.cert.pem ``` Create the server certificate ``` Generate server key pair: keytool -keystore server.jks -genkey -alias server. Create certificate signing request (CSR): keytool -keystore server.jks -certreq -alias server -keyalg rsa -file localhost.csr ``` Sign a CSR (note that various defaults have been added to openssl.cfg) ``` openssl ca -extensions usr_cert -notext -md sha256 -policy policy_anything -in ..\xyz_ca\certs\localhost.csr -out ..\xyz_ca\certs\localhost.pem ``` Import the CA certificate ``` keytool -keystore server.jks -importcert -trustcacerts -alias root -file "\Program Files\OpenSSL-Win64\xyz_ca\cacert\ca.cert.pem" ``` Import the signed certificate ``` keytool -keystore server.jks -importcert -alias server -file "\Program Files\OpenSSL-Win64\xyz_ca\certs\localhost.pem" ``` **adding key to jobss** \*\*finally getting error like\*\* **in firefox** ..... 06:36:34,325 INFO [stdout] (http-/0.0.0.0:8443-2) %% Initialized: [Session-11, SSL\_NULL\_WITH\_NULL\_NULL] 06:36:34,326 INFO [stdout] (http-/0.0.0.0:8443-2) %% Invalidated: [Session-11, SSL\_NULL\_WITH\_NULL\_NULL] 06:36:34,326 INFO [stdout] (http-/0.0.0.0:8443-2) http-/0.0.0.0:8443-2, SEND TLSv1 ALERT: fatal, description = handshake\_failure 06:36:34,326 INFO [stdout] (http-/0.0.0.0:8443-2) http-/0.0.0.0:8443-2, WRITE: TLSv1 Alert, length = 2 06:36:34,326 INFO [stdout] (http-/0.0.0.0:8443-2) [Raw write]: length = 7 06:36:34,328 INFO [stdout] (http-/0.0.0.0:8443-2) 0000: 15 03 01 00 02 02 28 ......( 06:36:34,343 INFO [stdout] (http-/0.0.0.0:8443-2) http-/0.0.0.0:8443-2, called closeSocket() 06:36:34,344 INFO [stdout] (http-/0.0.0.0:8443-2) http-/0.0.0.0:8443-2, handling exception: javax.net.ssl.SSLHandshakeException: no cipher suites in common 06:36:34,345 INFO [stdout] (http-/0.0.0.0:8443-2) http-/0.0.0.0:8443-2, IOException in getSession(): javax.net.ssl.SSLHandshakeException: no cipher suites in common 06:36:34,345 INFO [stdout] (http-/0.0.0.0:8443-2) http-/0.0.0.0:8443-2, called close() 06:36:34,345 INFO [stdout] (http-/0.0.0.0:8443-2) http-/0.0.0.0:8443-2, called closeInternal(true) **in iE** 06:46:12,588 INFO [stdout] (http-/0.0.0.0:8443-2) 0F80: 55 04 0A 13 06 75 6E 69 73 79 73 31 0F 30 0D 06 U....unisys1.0.. 06:46:12,589 INFO [stdout] (http-/0.0.0.0:8443-2) 0F90: 03 55 04 0B 13 06 75 6E 69 73 79 73 31 16 30 14 .U....unisys1.0. 06:46:12,589 INFO [stdout] (http-/0.0.0.0:8443-2) 0FA0: 06 03 55 04 03 13 0D 69 6E 2D 70 6D 75 68 61 6D ..U....in-pmuham 06:46:12,590 INFO [stdout] (http-/0.0.0.0:8443-2) 0FB0: 6D 73 2D 31 31 27 30 25 06 09 2A 86 48 86 F7 0D ms-11'0%..\*.H... 06:46:12,593 INFO [stdout] (http-/0.0.0.0:8443-2) 0FC0: 01 09 01 16 18 6D 75 68 61 6D 6D 61 64 2E 70 40 .....muhammad.p@ 06:46:12,594 INFO [stdout] (http-/0.0.0.0:8443-2) 0FD0: 69 6E 2E 75 6E 69 73 79 73 2E 63 6F 6D 0E 00 00 ... 06:46:12,595 INFO [stdout] (http-/0.0.0.0:8443-2) 0FE0: 00 . 06:46:12,596 INFO [stdout] (http-/0.0.0.0:8443-2) http-/0.0.0.0:8443-2, received EOFException: error 06:46:12,596 INFO [stdout] (http-/0.0.0.0:8443-2) http-/0.0.0.0:8443-2, handling exception: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake 06:46:12,596 INFO [stdout] (http-/0.0.0.0:8443-2) %% Invalidated: [Session-12, TLS\_DHE\_DSS\_WITH\_AES\_128\_CBC\_SHA] 06:46:12,596 INFO [stdout] (http-/0.0.0.0:8443-2) http-/0.0.0.0:8443-2, SEND TLSv1 ALERT: fatal, description = handshake\_failure 06:46:12,596 INFO [stdout] (http-/0.0.0.0:8443-2) http-/0.0.0.0:8443-2, WRITE: TLSv1 Alert, length = 2 06:46:12,596 INFO [stdout] (http-/0.0.0.0:8443-2) [Raw write]: length = 7 06:46:12,597 INFO [stdout] (http-/0.0.0.0:8443-2) 0000: 15 03 01 00 02 02 28 ......( 06:46:12,597 INFO [stdout] (http-/0.0.0.0:8443-2) http-/0.0.0.0:8443-2, called closeSocket() 06:46:12,597 INFO [stdout] (http-/0.0.0.0:8443-2) http-/0.0.0.0:8443-2, IOException in getSession(): javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake 06:46:12,597 INFO [stdout] (http-/0.0.0.0:8443-2) http-/0.0.0.0:8443-2, called close() 06:46:12,597 INFO [stdout] (http-/0.0.0.0:8443-2) http-/0.0.0.0:8443-2, called closeInternal(true) please help me to rectify this ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [May 20, 2017, 11:40pm UTC](https://discuss.elastic.co/t/problem-with-ssl-configuration-in-jboss/86203/2 "2017-05-20T23:40:53Z")
I don't know jboss, but what does this have to do with ES? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 17, 2017, 11:40pm UTC](https://discuss.elastic.co/t/problem-with-ssl-configuration-in-jboss/86203/3 "2017-06-17T23:40:55Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.