# Cannot connect to aggregate server on Tomcat 9 when using SSL. Only thing in logs are warning messages

**URL:** <https://forum.getodk.org/t/cannot-connect-to-aggregate-server-on-tomcat-9-when-using-ssl-only-thing-in-logs-are-warning-messages/16000>\
**Category:** Support\
**Tags:** odk-aggregate\
**Created:** [October 30, 2018, 2:29pm UTC](https://forum.getodk.org/t/cannot-connect-to-aggregate-server-on-tomcat-9-when-using-ssl-only-thing-in-logs-are-warning-messages/16000 "2018-10-30T14:29:04Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![yanokwa](https://getodk.b-cdn.net/user_avatar/forum.getodk.org/yanokwa/32/1695_2.png) [@yanokwa](https://forum.getodk.org/u/yanokwa)\
**Post date:** [October 30, 2018, 7:34pm UTC](https://forum.getodk.org/t/cannot-connect-to-aggregate-server-on-tomcat-9-when-using-ssl-only-thing-in-logs-are-warning-messages/16000/2 "2018-10-30T19:34:20Z")

</div>

Hi @Craig_Savel, when you get a chance, please [introduce yourself here](https://forum.getodk.org/t/-/6671). You've been a community member for some time and we'd love to learn more 🙂

As to the issue at hand, your upload had sensitive information, so I have removed it. Please change your keystore password because it has been compromised.

I don't think Tomcat 9 is the problem. @ggalmazor, can you confirm?

I also don't think the warnings you are getting are the cause of the problem. Just to be extra sure, there are usually 2-3 different logs (catalina, localhost, and localhost\_access) for your Tomcat install. Check all those for hints.

My guess is that there is something wrong with your `server.xml` config or your keystore setup. Those are going to be hard to troubleshoot, but as a first step, does connecting using your web browser on port 80 or port 443 have different results?

It might be worth trying LetsEncrypt (it's free!) for the certs just to make sure something more standard works. My LetsEncrypt setup looks like this:

```xml
<Connector port="443" protocol="org.apache.coyote.http11.Http11AprProtocol"
	SSLCertificateFile="/etc/acme.sh/example.com/cert.pem"
	SSLCertificateKeyFile="/etc/acme.sh/example.com/key.pem"
	SSLCertificateChainFile="/etc/acme.sh/example.com/fullchain.pem"
	SSLVerifyClient="none" SSLProtocol="TLSv1+TLSv1.1+TLSv1.2"
	maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
	clientAuth="false" sslProtocol="TLS" connectionTimeout="20000" URIEncoding="UTF-8" />

```

---

_[View the full topic](https://forum.getodk.org/t/cannot-connect-to-aggregate-server-on-tomcat-9-when-using-ssl-only-thing-in-logs-are-warning-messages/16000)._