SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names present
Roger
rmoore@s166-62-22-114:~$ sudo bbb-conf --clean
# Warning: API URL IPs do not match host:
#
# IP from ifconfig: 166.62.22.114
# /var/lib/tomcat7/webapps/demo/bbb_api_conf.jsp: String BigBlueButtonURL = "https:
Doing a restart of BigBlueButton and cleaning out all log files...
* Stopping daemon monitor monit [ OK ]
* Stopping Red5 Server red5 [ OK ]
* Stopping Tomcat servlet engine tomcat7 [ OK ]
Killing: 3533
* Stopping bbb-record-core
Cleaning Log Files ...
* nginx is not running
* Red5 Server is not running.
* Tomcat servlet engine is not running.
5066 Backgrounding.
Waiting for FreeSWITCH to start: ...............
* Starting Red5 Server red5
[ OK ]
* Starting Tomcat servlet engine tomcat7 [ OK ]
* Starting daemon monitor monit [ OK ]
Note: monit will automatically start bbb-record-core and LibreOffice within 60 seconds.
Waiting for BigBlueButton to finish starting up (this may take a minute): ...... done
** Potential problems described below **
# Warning: API URL IPs do not match host:
#
# IP from ifconfig: 166.62.22.114
# /var/lib/tomcat7/webapps/demo/bbb_api_conf.jsp: String BigBlueButtonURL = "https:
# Warning: The API demos are installed and accessible from:
#
#
# These API demos allow anyone to access your server without authentication
# to create/manage meetings and recordings. They are for testing purposes only.
# If you are running a production system, remove them by running:
#
# sudo apt-get purge bbb-demo
# Warning: The client self check is installed and accessible from:
#
#
# Error: Unable to reach default URL for presentation:
#
# https://166.62.22.114/default.pdf
#
# Check value for beans.presentationService.defaultUploadedPresentation in
# /var/lib/tomcat7/webapps/bigbluebutton/WEB-INF/classes/bigbluebutton.properties
When I attempt to run the basic demo, by going to:
Then I enter a username, and hit the "Join" button, I get the following exception:
Does anyone have any suggestions? TIA.
Mario Gasparoni Junior
keytool -import -v -trustcacerts -alias <your.domain> -file /path/to/your/certificate/<your.domain>.crt -keystore <JAVA_HOME>/jre/lib/security/cacerts -keypass yourpass -storepass yourpass
if you followed BBB docs, <JAVA_HOME> should be /usr/lib/jvm/java-7-openjdk-amd64
--
You received this message because you are subscribed to the Google Groups "BigBlueButton-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-...@googlegroups.com.
To post to this group, send email to bigblueb...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-dev.
For more options, visit https://groups.google.com/d/optout.
--
Roger
Mario Gasparoni Junior
keytool -import -v -trustcacerts -alias <your.domain> -file /path/to/your/certificate/<your.domain>.crt -keystore <JAVA_HOME>/jre/lib/security/cacerts -keypass changeit -storepass changeit
Roger
Mario Gasparoni Junior
Should I be using my server IP address instead of the tuberedu.ca domain?
Use your domain name
Take a look at:
http://docs.bigbluebutton.org/install/install.html#configure-bigbluebutton-to-use-a-domain-name
Sent from mobile
Roger
rmoore@s166-62-22-114:~/Workspace/TutorApplication$ sudo bbb-conf --clean
# IP does not match:
# IP from ifconfig: 166.62.22.114
# /etc/nginx/sites-available/bigbluebutton: tuberedu.ca
# Warning: API URL IPs do not match host:
#
# IP from ifconfig: 166.62.22.114
# /var/lib/tomcat7/webapps/demo/bbb_api_conf.jsp: String BigBlueButtonURL = "https:
Doing a restart of BigBlueButton and cleaning out all log files...
* Stopping daemon monitor monit [ OK ]
* Stopping Red5 Server red5 [ OK ]
* Stopping Tomcat servlet engine tomcat7 [ OK ]
Killing: 20576
* Stopping bbb-record-core
Cleaning Log Files ...
* nginx is not running
* Red5 Server is not running.
* Tomcat servlet engine is not running.
22658 Backgrounding.
Waiting for FreeSWITCH to start: ...............
* Starting Red5 Server red5
[ OK ]
* Starting Tomcat servlet engine tomcat7 [ OK ]
* Starting daemon monitor monit [ OK ]
Note: monit will automatically start bbb-record-core and LibreOffice within 60 seconds.
Waiting for BigBlueButton to finish starting up (this may take a minute): ....... done
** Potential problems described below **
# IP does not match:
# IP from ifconfig: 166.62.22.114
# /etc/nginx/sites-available/bigbluebutton: tuberedu.ca
# Warning: API URL IPs do not match host:
#
# IP from ifconfig: 166.62.22.114
# /var/lib/tomcat7/webapps/demo/bbb_api_conf.jsp: String BigBlueButtonURL = "https:
# Warning: The API demos are installed and accessible from:
#
#
# These API demos allow anyone to access your server without authentication
# to create/manage meetings and recordings. They are for testing purposes only.
# If you are running a production system, remove them by running:
#
# sudo apt-get purge bbb-demo
# Warning: The client self check is installed and accessible from:
#
#
rmoore@s166-62-22-114:~/Workspace/TutorApplication$
rmoore@s166-62-22-114:~/Workspace/TutorApplication$ sudo bbb-conf --check
BigBlueButton Server 0.9.1 (402)
Kernel version: 3.13.0-042stab092.2
Distribution: Ubuntu 14.04.4 LTS (64-bit)
Memory: 8192 MB
/var/www/bigbluebutton/client/conf/config.xml (bbb-client)
Port test (tunnel): tuberedu.ca
Red5: tuberedu.ca
useWebrtcIfAvailable: true
/opt/freeswitch/conf/sip_profiles/external.xml (FreeSWITCH)
websocket port: 5066
WebRTC enabled: true
/etc/nginx/sites-available/bigbluebutton (nginx)
server name: tuberedu.ca
port: 80
443 ssl
bbb-client dir: /var/www/bigbluebutton
/var/lib/tomcat7/webapps/bigbluebutton/WEB-INF/classes/bigbluebutton.properties (bbb-web)
bbb-web host: tuberedu.ca
/var/lib/tomcat7/webapps/demo/bbb_api_conf.jsp (API demos)
api url: String BigBlueButtonURL = "https:
/var/www/bigbluebutton/check/conf/config.xml (client check)
client check: tuberedu.ca
/usr/share/red5/webapps/bigbluebutton/WEB-INF/red5-web.xml (red5)
voice conference: FreeSWITCH
capture video: true
capture desktop: true
/usr/local/bigbluebutton/core/scripts/bigbluebutton.yml (record and playback)
playback host: tuberedu.ca
** Potential problems described below **
# IP does not match:
# IP from ifconfig: 166.62.22.114
# /etc/nginx/sites-available/bigbluebutton: tuberedu.ca
# Warning: API URL IPs do not match host:
#
# IP from ifconfig: 166.62.22.114
# /var/lib/tomcat7/webapps/demo/bbb_api_conf.jsp: String BigBlueButtonURL = "https:
# Warning: The API demos are installed and accessible from:
#
#
# These API demos allow anyone to access your server without authentication
# to create/manage meetings and recordings. They are for testing purposes only.
# If you are running a production system, remove them by running:
#
# sudo apt-get purge bbb-demo
# Warning: The client self check is installed and accessible from:
#
#
rmoore@s166-62-22-114:~/Workspace/TutorApplication$ sudo bbb-conf --debug
-- Exceptions found in /var/lib/tomcat7/logs/ --
/var/lib/tomcat7/logs/catalina.out:javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names matching IP address 166.62.22.114 found
/var/lib/tomcat7/logs/catalina.out: at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
/var/lib/tomcat7/logs/catalina.out:Caused by: java.security.cert.CertificateException: No subject alternative names matching IP address 166.62.22.114 found
/var/lib/tomcat7/logs/catalina.out:java.lang.NullPointerException
rmoore@s166-62-22-114:~/Workspace/TutorApplication$
Chad Pilkey
Also, if you are using a self-signed certificate you will run into other issue because tomcat won't accept it. You can use a service like LetsEncrypt to generate a legitimate certificate.
...
Roger
sudo ufw allow 443/tcp
| |||
Server Type: nginx/1.4.6 (Ubuntu) | |||
The certificate should be trusted by all major web browsers (all the correct intermediate certificates are installed). | |||
| |||
| |||
The hostname (tuberedu.ca) is correctly listed in the certificate. |
/etc/nginx/ssl/
/etc/ssl/certs/
...
Roger
Chad Pilkey
I also noticed that your config.xml has your IP in it instead of your domain name. I think you will need to go into /var/www/bigbluebutton/client/conf/config.xml and replace all of the "166.62.100.114" with "tuberedu.ca". It's not a problem now, but it will be once you can actually get to the client loading part.
...
Roger
...
Rodji Swell
cat subdomain.crt intermediate1.crt intermediate2.cer > /etc/nginx/ssl/subdomain.domain.crt
среда, 6 апреля 2016 г., 2:07:41 UTC+3 пользователь Mario Gasparoni Junior написал: