Safari cannot establish a secure connection to my localhost


username

I am using maven + grizzly + jersey to start my own server. I created self signed certificate so that my server can support https. If you're curious, here's how I generated the certificate

keytool -genkey -keystore ./keystore_server -alias serverKey -dname "CN=localhost, OU=Jersey, O=Sun Microsystem, L=Prague, ST=Czech Republic, C=CZ"
keytool -export -alias serverKey -rfc -keystore ./keystore_server > ./server.cert

I tested on an iMac (running Mavericks), and now I add server.cert to the system keychain so that all users can trust this certificate. Also, I changed the trust level to "Always Trust".

I got this working in Chrome and Firefox. They asked me to add an exception for that certificate, which I did and all went well. However, I've never satisfied Safari (7.0). I keep getting the error that Safari cannot establish a secure connection to my localhost.

Does anyone know why this is happening? Or is there a better way to debug this so that I can figure out what's going wrong.

Thank you in advance. I am truely thankful.

w

openssl x509 -in server.cert-通知PEM -text -noout

Here is my certificate which looks like...

Safari doesn't provide DSS support (see Wireshark capture below), even though RFC 2246 Section 9 requires it :

9. Mandatory Cipher Suites

   In the absence of an application profile standard specifying
   otherwise, a TLS compliant application MUST implement the cipher
   suite TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA.

Another problem you might run into is the SecureTransportsimplementation ECDHE_ECDSA_*. It is broken for some versions of OS X and iOS. See [openssl.org#3068][PATCH] Safari broken ECDHE-ECDSA workaround, and Apple apparently from the OpenSSL developers mailing list for the hard point.


enter image description here

Related


Safari cannot establish a secure connection to my localhost

username I am using maven + grizzly + jersey to start my own server. I created self signed certificate so that my server can support https. If you're curious, here's how I generated the certificate keytool -genkey -keystore ./keystore_server -alias serverKey -

How to establish a secure connection to websocket on localhost?

impostor We have an application running on a POS terminal that should receive data from an application running on the same computer, while displaying content from a remote site loaded over HTTPS. In order to receive data from the local application we want to u

MQTT.js cannot establish a localhost broker connection

Jackpot I am developing a React Native mobile app. I am using MQTT.js to establish a connection with the broker. As a first test, I hooked up with the Mosquitto public broker . I managed to connect only the WebSockets ports (8080 and 8081). Unfortunately, ther

MQTT.js cannot establish a localhost broker connection

Jackpot I am developing a React Native mobile app. I am using MQTT.js to establish a connection with the broker. As a first test, I hooked up with the Mosquitto public broker . I managed to connect only the WebSockets ports (8080 and 8081). Unfortunately, ther

Unable to establish secure websocket connection with gdax

space monkey I'm trying to connect to a GDAX websocket feed from C# (target framework: Core 2.0) I am using this NodeJS implementation as a reference. my code: var ws = new WebSocket("wss://ws-feed.gdax.com"); ws.Security.AllowUnstrustedCertificate = true; //

Unable to establish secure connection from Celery to Redis

Avner Moshkowitz I'm following this tutorial and adapting code related to Celery background into my project. In my case, I'm operating in a Docker environment and I have a secure site (ie https://localhost ). I adjusted the code for the secure connection as fo

How to catch "Unable to establish a secure connection"

Polo Hole Set I have a website and some people with older computers or browsers are unable to establish a connection to the secure part of our website. What I want to do is catch connection errors and then reroute them to a screen explaining why this is happen

SignalR cannot establish SSL connection

Fedir Katushonok I'm using SignalR to communicate between an ASP.NET server and a Xamarin.Forms client. However, when I use https, the HubConnection throws this exception when trying to use .StartAsync(): System.Net.Http.HttpRequestException: 'The SSL connecti

SignalR cannot establish SSL connection

Fedir Katushonok I'm using SignalR to communicate between an ASP.NET server and a Xamarin.Forms client. However, when I use https, the HubConnection throws this exception when trying to use .StartAsync(): System.Net.Http.HttpRequestException: 'The SSL connecti