what is all this ssl stuff at startup when there is no https binding?

12 views
Skip to first unread message

Mark Anderson

unread,
May 16, 2021, 9:51:09 PM5/16/21
to Payara Forum
even though i have no https port configured, so in theory it should all be disabled i see a bunch of stuff like this printed out when starting payara-micro.jar :

[2021-05-16T18:40:42.646-0700] [] [WARNING] [NCLS-SECURITY-05054] [javax.enterprise.system.security.ssl] [tid: _ThreadID=1 _ThreadName=main] [timeMillis: 1621215642646] [levelValue: 900] [[
  The SSL certificate has expired: [
[
  Version: V3
  Subject: EMAILADDRESS=server...@thawte.com, CN=Thawte Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA
  Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5

Rudy De Busscher

unread,
May 18, 2021, 3:42:21 AM5/18/21
to Payara Forum
These are warnings related to certificates in the truststore and are not only related to https functionality of Payara Micro.  But they are also used when you initiate a SSL connection from your application code.

Best regards
Rudy
Reply all
Reply to author
Forward
0 new messages