Guacamole - tomcat9

Fehler:

Sep 11 19:50:16 apache-guacamole tomcat9[935437]: Starting ProtocolHandler ["http-nio-80"]
Sep 11 19:50:16 apache-guacamole tomcat9[935437]: Starting ProtocolHandler ["https-openssl-nio-443"]
Sep 11 19:50:16 apache-guacamole tomcat9[935437]: Server startup in [10303] milliseconds
Sep 11 19:50:16 apache-guacamole tomcat9[935437]: Error running socket processor
Sep 11 19:50:16 apache-guacamole tomcat9[935437]: java.lang.Exception: cannot create new ssl
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.jni.SSL.newSSL(Native Method)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.openssl.OpenSSLEngine.<init>(OpenSSLEngine.java:200)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.openssl.OpenSSLContext.createSSLEngine(OpenSSLContext.java:592)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLEngine(AbstractJsseEndpoint.java:119)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.SecureNioChannel.processSNI(SecureNioChannel.java:308)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.SecureNioChannel.handshake(SecureNioChannel.java:154)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1711)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at java.base/java.lang.Thread.run(Thread.java:829)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]: Error running socket processor
Sep 11 19:50:16 apache-guacamole tomcat9[935437]: java.lang.Exception: cannot create new ssl
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.jni.SSL.newSSL(Native Method)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.openssl.OpenSSLEngine.<init>(OpenSSLEngine.java:200)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.openssl.OpenSSLContext.createSSLEngine(OpenSSLContext.java:592)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLEngine(AbstractJsseEndpoint.java:119)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.SecureNioChannel.processSNI(SecureNioChannel.java:308)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.SecureNioChannel.handshake(SecureNioChannel.java:154)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1711)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
Sep 11 19:50:16 apache-guacamole tomcat9[935437]:     at java.base/java.lang.Thread.run(Thread.java:829)
Sep 11 19:50:17 apache-guacamole tomcat9[935437]: Error running socket processor
Sep 11 19:50:17 apache-guacamole tomcat9[935437]: java.lang.Exception: cannot create new ssl
Sep 11 19:50:17 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.jni.SSL.newSSL(Native Method)
Sep 11 19:50:17 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.openssl.OpenSSLEngine.<init>(OpenSSLEngine.java:200)
Sep 11 19:50:17 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.openssl.OpenSSLContext.createSSLEngine(OpenSSLContext.java:592)
Sep 11 19:50:17 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLEngine(AbstractJsseEndpoint.java:119)
Sep 11 19:50:17 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.SecureNioChannel.processSNI(SecureNioChannel.java:308)
Sep 11 19:50:17 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.SecureNioChannel.handshake(SecureNioChannel.java:154)
Sep 11 19:50:17 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1711)
Sep 11 19:50:17 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
Sep 11 19:50:17 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191)
Sep 11 19:50:17 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659)
Sep 11 19:50:17 apache-guacamole tomcat9[935437]:     at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
Sep 11 19:50:17 apache-guacamole tomcat9[935437]:     at java.base/java.lang.Thread.run(Thread.java:829)

nano /etc/tomcat9/server.xml:

    <Connector port="443" protocol="org.apache.coyote.http11.Http11NioProtocol"
               maxThreads="150" SSLEnabled="true">
        <SSLHostConfig>
            <Certificate certificateKeyFile="/etc/ssl/litchys.de/privkey.pem"
                         certificateFile="/etc/ssl/litchys.de/cert.pem"
                         certificateChainFile="/etc/ssl/litchys.de/chain.pem" />
        </SSLHostConfig>
    </Connector>

chown -R tomcat:tomcat /etc/ssl/litchys.de/*

systemctl restart tomcat9