search

jaliss / securesocial

A module that provides OAuth, OAuth2 and OpenID authentication for Play Framework applications
http://www.securesocial.ws
Apache License 2.0
1.19k stars 511 forks source link

Error code: ERR_SSL_PROTOCOL_ERROR #246

Closed huhonator closed 8 years ago

huhonator commented 11 years ago

When I use play in production mode I am getting this warn msg:

[warn] application - [securesocial] IMPORTANT: Play is running in production mode but you did not turn SSL on for SecureSocial.Not using SSL can make it really easy for an attacker to steal your users credentials and/or the authenticator cookie and gain access to the system.

Follow to this msg I changed SSL property in securesocial.conf to true. But now I am not allowed to get on to login page and getting SSL connection ERROR with hint:

Unable to make a secure connection to the server. This may be a problem with the server, or it may be requiring a client authentication certificate that you don't have.

What should I do?

jaliss commented 11 years ago

What version of Play are you using? Do you have something in front of your play server (eg: nginx)? Check this for info on how to configure SSL for Play in case you have not done it: http://stackoverflow.com/questions/10748305/how-to-config-playframework2-to-support-ssl.

huhonator commented 11 years ago

I am using 2.1.1 version and nothing in front of. I went through christina's comment and set properties to application.conf like this:

https.port=9443 https.keyStore="conf/keystore.jks" https.keyStoreType="JKS" https.keyStorePassword=apass

then in securesocial.conf enable SSL and creating a production enviroment with play clean dist. After running project on server, application is not listening on port 9443, only at :9000 with above specified error.

jaliss commented 11 years ago

still experiencing the problem?