Hi everyone,
we have set up an ARIS10 installation at our university, with two tenants - one for the teaching staff and one to use in courses with students.
Recently I added an SSL certificate (from let's encrypt) to the ARIS Server. Browsers identify fine via https, starting the ARIS10 client for the default tenant works, but starting the cilents (the jar files) for the teaching tenant or the course tenant presents an error message, saying that the SSL certificate is not trustworthy or missing in the JRE.
I specifically checked that the JRE (1.8.114) does accept "let's encrypt" certificates ( signed by IdenTrust CA) and the default tentant does not show this error.
Unfortunately importing the server certificate itself into the JRE is not an option, since this would have to be rolled out all over campus. I would rather not use an SSL encryption in this case.
Thus, I wanted to ask:
1. Is it possible to fix the cert error for the remaining two tenants?
2. If 1 is not possible, is there some way to remove the SSL encryption for all tenants?
3. Because of EDIT3: Is it possible to change the connection URL in the client configuration for the tenants to use port 1080 instead of 443?
Attached is an screenshot of the error message and the protocoll mentioned in the message. I did remove the URL for security reasons (the server is reachable from outside) but I will PM you the URL if you're willing to help.
Thank you in advance!
EDIT: I just wanted to add, that, of course I do have the server logs from the collectlogfile.sh available to provide them via a PM, for security reasons, again.
EDIT2: Importing the server cert into the JRE does not help for the failing tenants.
EDIT3: I'm futher investigating the issue, finding the following: When I start the client with the configuration for the default tenant, which works fine, the URL from the ARISLauncher log (ARISLauncher_23.08.2017_12-46-56.log.txt) changes to port 1080 instead of 443 (resp. 1443). Once the client started, I can change the tenant in the setings and connect to the other tenants perfectly. So it would solve the issue, if I could change the connection URL in the client configuration for the remaining tenants, can this be done?
Thank you!