BIP - https for Endusers (Browser) ends up in ERR_SSL_VERSION_OR_CIPHER_MISMATCH

[mario_panzenboeck]

Hello,

I am facing an issue while setting up SSL for BIP. The goal is to access the BI Launchpad with https and not http. So we changed the ports to 80 and 443 and I was following the tomcat documentations to achieve this.

I created the certificate request which got already signed and finally imported all the certificates. When I am accessing the https://localhost/BOE/BI site I get the following error message: ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Can somebody help me out with this?

Thanks!

[denis_konovalov]

I'm just curious, why are you asking this here ?
The issue is not related to any SAP products - it is common certificate/browser/webapp server setup issue with SSL. The cipher suites you specified for the tomcat https connector are not supported by your browsers.

https://kinsta.com/knowledgebase/err_ssl_version_or_cipher_mismatch/

https://support.google.com/chrome/a/answer/6357171?hl=en

https://answers.microsoft.com/en-us/edge/forum/edge_issue-edge_win10/errsslversionorciphermismatch/a...

[ayman_salem · Accepted solution]

Hi Mario,

It seems that you have an invalid certificate or it support only old TLS version (old TLS 1.0 is no longer supported )

so, follow this article

https://kinsta.com/knowledgebase/err_ssl_version_or_cipher_mismatch/

and check your certificate SSL check tool , also the TLS version

Second, your tomcat server.xml configuration for SSL should look like this:

<Connector port="7983" protocol="HTTP/1.1" SSLEnabled="true" maxThreads="150" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS" keystoreFile="...<path>.../<keystore>.p12" keystorePass="xxxxxx"/>
 

...

I hope that will help

Ayman

[mario_panzenboeck · Accepted solution]

Hello, this was the Problem: my certificate was invalid I had a typo while creating it. The alias wasn´t correct! So now it´s working fine. Thanks for your help.