Connection terminates using SSL using JBoss AS7 (Richfaces page)

Question

I have a strange problem. I am using Richfaces 4 on a JBOSS AS7 web server with HTTPS and client authentication.

Everything (client auth, HTTPS, etc.) works really fine, but sometimes stylesheets and JavaScript resources are not loaded using Internet Explorer and, oddly enough, with Firefox. Firebug and other debugging tools simply say that the connection was interrupted, no further information.

In addition, after a while I can’t reproduce the situation, Internet Explorer (and even Firefox, but less often) cannot display the entire site. In this situation, updating, deleting the cache, cookies, restarting IE does not help at all.

Just to make sure this is not a network or proxy problem, I disconnected my computer from it by running my web server on localhost. The same problems also arise here.

Any ideas? Thank you in advance!

---

Nobody? I changed my log level to DEBUG and noticed the following result:

10:25:48,518 DEBUG [org.apache.tomcat.util.net.AprEndpoint] (http--0.0.0.0-8443-1) Handshake failed: error:00000000:lib(0):func(0):reason(0) 

---

It seems that the connection will be reset.

Answer 1

I did not find why my settings do not work. However, I used my own JBoss connectors and therefore decided not to use them.

Without using the native connector and after creating new certificates, it works fine, the problems described above have not yet been implemented.

I used the following source to create my self-signed certificates:

• http://virgo47.wordpress.com/2010/08/23/tomcat-web-application-with-ssl-client-certificates/

These are my settings in standalone.xml

 <security-domain .... <jsse keystore-password="changeit" keystore-url="keystore.jks" truststore-password="changeit" truststore-url="cacerts.jks" server-alias="sercer" client-auth="true" protocols="TLS"/> 

and

 <connector .... <ssl name="ssl" key-alias="sercer" password="changeit" certificate-key-file="keystore.jks" protocol="TLSv1" verify-client="true" ca-certificate-file="cacerts.jks" /> 

However , I still do not understand why it worked before in IE and FF, and also without problems in Chrome. That would rule out my certificates as an original issue, right?