SSL Key and URL

So got Metabase up and running and launched it fine with a public URL and port 80 on a Windows server. Trying to implement SSL and have enabled it in the "Admin" section. I generated a cert file and imported into the keystone. When I define the startup variables seems to start and I can access it via port 80 but get ssl_protocol_err when I try to access via browser https://analytics.myezrewards.com

Thoughts on what I might be missing

Start up command - java -DMB_JETTY_PORT="80" -DMB_JETTY_SSL="True" -DMB_JETTY_SSL_PORT="443" -DMB_JETTY_SSL_KEYSTORE="C:\SSL\analytics.myezrewards.jks" -DMB_JETTY_SSL_KEYSTORE_PASSWORD="xxxxx" -jar metabase.jar

Log:

C:\Metabase>java -DMB_JETTY_PORT="80" -DMB_JETTY_SSL="True" -DMB_JETTY_SSL_PORT="443" -DMB_JETTY_SSL_KEYSTORE="C:\SSL\analytics.myezrewards.jks" -DMB_JETTY_SSL_KEYSTORE_PASSWORD="xxxxxx" -jar metabase.jar
WARNING: sun.reflect.Reflection.getCallerClass is not supported. This will impact performance.
2022-02-17 19:21:24,784 INFO metabase.util :: Maximum memory available to JVM: 2.0 GB
2022-02-17 19:21:37,580 INFO util.encryption :: Saved credentials encryption is DISABLED for this Metabase instance.
For more information, see https://metabase.com/docs/latest/operations-guide/encrypting-database-details-at-rest.html
2022-02-17 19:21:40,574 INFO driver.impl :: Registered abstract driver :sql
? Load driver :sql took 675.7 ms
2022-02-17 19:21:40,590 INFO driver.impl :: Registered abstract driver :sql-jdbc (parents: [:sql])
Load driver :sql-jdbc took 694.1 ms
2022-02-17 19:21:40,590 INFO driver.impl :: Registered driver :h2 (parents: [:sql-jdbc])
2022-02-17 19:21:40,606 INFO driver.impl :: Registered driver :mysql (parents: [:sql-jdbc])
2022-02-17 19:21:41,325 INFO driver.impl :: Registered driver :postgres (parents: [:sql-jdbc])
2022-02-17 19:21:43,845 INFO metabase.core ::
Metabase v0.41.6 (296635f release-x.41.x)

Copyright ⌐ 2022 Metabase, Inc.

Metabase Enterprise Edition extensions are NOT PRESENT.
2022-02-17 19:21:43,859 WARN metabase.core :: WARNING: You have enabled namespace tracing, which could log sensitive information like db passwords.
2022-02-17 19:21:43,860 INFO metabase.core :: Starting Metabase in STANDALONE mode
2022-02-17 19:21:43,940 INFO metabase.server :: Launching Embedded Jetty Webserver with config:
{:port 80, :ssl? true, :ssl-port 443, :keystore "C:\SSL\analytics.myezrewards.jks"}

2022-02-17 19:21:44,254 INFO metabase.core :: Starting Metabase version v0.41.6 (296635f release-x.41.x) ...
2022-02-17 19:21:44,283 INFO metabase.core :: System info:
{"file.encoding" "Cp1252",
"java.runtime.name" "OpenJDK Runtime Environment",
"java.runtime.version" "11.0.14+9",
"java.vendor" "Eclipse Adoptium",
"java.vendor.url" "https://adoptium.net/",
"java.version" "11.0.14",
"java.vm.name" "OpenJDK 64-Bit Server VM",
"java.vm.version" "11.0.14+9",
"os.name" "Windows Server 2022",
"os.version" "10.0",
"user.language" "en",
"user.timezone" "UTC"}

2022-02-17 19:21:44,293 INFO metabase.plugins :: Loading plugins in C:\Metabase\plugins...
2022-02-17 19:21:44,785 DEBUG plugins.lazy-loaded-driver :: Registering lazy loading driver :bigquery-cloud-sdk...
2022-02-17 19:21:44,798 INFO driver.impl :: Registered driver :bigquery-cloud-sdk (parents: [:sql])
2022-02-17 19:21:44,815 INFO plugins.dependencies :: Plugin 'Metabase BigQuery Driver' depends on plugin 'Metabase Google Drivers Shared Dependencies'
2022-02-17 19:21:44,824 INFO plugins.dependencies :: Metabase BigQuery Driver dependency {:plugin Metabase Google Drivers Shared Dependencies} satisfied? false
2022-02-17 19:21:44,839 INFO plugins.dependencies :: Plugins with unsatisfied deps: ["Metabase BigQuery Driver"]
2022-02-17 19:21:44,857 DEBUG plugins.lazy-loaded-driver :: Registering lazy loading driver :druid...
2022-02-17 19:21:44,888 INFO driver.impl :: Registered driver :druid
2022-02-17 19:21:44,917 DEBUG plugins.lazy-loaded-driver :: Registering lazy loading driver :google...
2022-02-17 19:21:44,929 INFO driver.impl :: Registered abstract driver :google
2022-02-17 19:21:44,934 INFO plugins.dependencies :: Metabase BigQuery Driver dependency {:plugin Metabase Google Drivers Shared Dependencies} satisfied? true
2022-02-17 19:21:44,936 DEBUG plugins.initialize :: Dependencies satisfied; these plugins will now be loaded: ["Metabase BigQuery Driver"]
2022-02-17 19:21:44,939 WARN plugins.lazy-loaded-driver :: Warning: plugin manifest for :bigquery does not include connection properties
2022-02-17 19:21:44,941 DEBUG plugins.lazy-loaded-driver :: Registering lazy loading driver :bigquery...
2022-02-17 19:21:44,948 INFO driver.impl :: Registered driver :bigquery (parents: [:sql :google])
2022-02-17 19:21:44,990 INFO plugins.dependencies :: Plugin 'Metabase Google Analytics Driver' depends on plugin 'Metabase Google Drivers Shared Dependencies'
2022-02-17 19:21:44,994 INFO plugins.dependencies :: Metabase Google Analytics Driver dependency {:plugin Metabase Google Drivers Shared Dependencies} satisfied? true
2022-02-17 19:21:44,996 DEBUG plugins.lazy-loaded-driver :: Registering lazy loading driver :googleanalytics...
2022-02-17 19:21:44,998 INFO driver.impl :: Registered driver :googleanalytics (parents: [:google])
2022-02-17 19:21:45,013 DEBUG plugins.lazy-loaded-driver :: Registering lazy loading driver :mongo...
2022-02-17 19:21:45,014 INFO driver.impl :: Registered driver :mongo
2022-02-17 19:21:45,025 INFO plugins.dependencies :: Metabase cannot initialize plugin Metabase Oracle Driver due to required dependencies. Metabase requires the Oracle JDBC driver in order to connect to Oracle databases, but we can't ship it as part of Metabase due to licensing restrictions. See https://metabase.com/docs/latest/administration-guide/databases/oracle.html for more details.

2022-02-17 19:21:45,028 INFO plugins.dependencies :: Metabase Oracle Driver dependency {:class oracle.jdbc.OracleDriver} satisfied? false
2022-02-17 19:21:45,029 INFO plugins.dependencies :: Plugins with unsatisfied deps: ["Metabase Oracle Driver"]
2022-02-17 19:21:45,033 DEBUG plugins.lazy-loaded-driver :: Registering lazy loading driver :presto-common...
2022-02-17 19:21:45,039 INFO driver.impl :: Registered abstract driver :presto-common
2022-02-17 19:21:45,103 INFO plugins.dependencies :: Plugin 'Metabase Presto JDBC Driver' depends on plugin 'Presto Common Driver'
2022-02-17 19:21:45,105 INFO plugins.dependencies :: Metabase Presto JDBC Driver dependency {:plugin Presto Common Driver} satisfied? true
2022-02-17 19:21:45,109 DEBUG plugins.lazy-loaded-driver :: Registering lazy loading driver :presto-jdbc...
2022-02-17 19:21:45,111 INFO driver.impl :: Registered driver :presto-jdbc (parents: [:presto-common])
2022-02-17 19:21:45,118 INFO plugins.dependencies :: Plugin 'Metabase Presto Driver' depends on plugin 'Presto Common Driver'
2022-02-17 19:21:45,120 INFO plugins.dependencies :: Metabase Presto Driver dependency {:plugin Presto Common Driver} satisfied? true
2022-02-17 19:21:45,122 DEBUG plugins.lazy-loaded-driver :: Registering lazy loading driver :presto...
2022-02-17 19:21:45,123 INFO driver.impl :: Registered driver :presto (parents: [:presto-common])
2022-02-17 19:21:45,135 DEBUG plugins.lazy-loaded-driver :: Registering lazy loading driver :redshift...
2022-02-17 19:21:45,137 INFO driver.impl :: Registered driver :redshift (parents: [:postgres])
2022-02-17 19:21:45,166 DEBUG plugins.lazy-loaded-driver :: Registering lazy loading driver :snowflake...
2022-02-17 19:21:45,168 INFO driver.impl :: Registered driver :snowflake (parents: [:sql-jdbc])
2022-02-17 19:21:45,202 DEBUG plugins.lazy-loaded-driver :: Registering lazy loading driver :hive-like...
2022-02-17 19:21:45,202 INFO driver.impl :: Registered abstract driver :hive-like (parents: [:sql-jdbc])
2022-02-17 19:21:45,205 DEBUG plugins.lazy-loaded-driver :: Registering lazy loading driver :sparksql...
2022-02-17 19:21:45,207 INFO driver.impl :: Registered driver :sparksql (parents: [:hive-like])
2022-02-17 19:21:45,215 DEBUG plugins.lazy-loaded-driver :: Registering lazy loading driver :sqlite...
2022-02-17 19:21:45,217 INFO driver.impl :: Registered driver :sqlite (parents: [:sql-jdbc])
2022-02-17 19:21:45,224 DEBUG plugins.lazy-loaded-driver :: Registering lazy loading driver :sqlserver...
2022-02-17 19:21:45,227 INFO driver.impl :: Registered driver :sqlserver (parents: [:sql-jdbc])
2022-02-17 19:21:45,234 INFO plugins.dependencies :: Metabase cannot initialize plugin Metabase Vertica Driver due to required dependencies. Metabase requires the Vertica JDBC driver in order to connect to Vertica databases, but we can't ship it as part of Metabase due to licensing restrictions. See https://metabase.com/docs/latest/administration-guide/databases/vertica.html for more details.

2022-02-17 19:21:45,235 INFO plugins.dependencies :: Metabase Vertica Driver dependency {:class com.vertica.jdbc.Driver} satisfied? false
2022-02-17 19:21:45,241 INFO plugins.dependencies :: Plugins with unsatisfied deps: ["Metabase Vertica Driver" "Metabase Oracle Driver"]
2022-02-17 19:21:45,243 INFO metabase.core :: Setting up and migrating Metabase DB. Please sit tight, this may take a minute...
2022-02-17 19:21:45,244 WARN db.env :: WARNING: Using Metabase with an H2 application database is not recommended for production deployments. For production deployments, we highly recommend using Postgres, MySQL, or MariaDB instead. If you decide to continue to use H2, please be sure to back up the database file regularly. For more information, see https://metabase.com/docs/latest/operations-guide/migrating-from-h2.html
2022-02-17 19:21:45,251 INFO db.setup :: Verifying h2 Database Connection ...
2022-02-17 19:21:45,618 INFO db.setup :: Successfully verified H2 1.4.197 (2018-03-18) application database connection.
2022-02-17 19:21:45,619 INFO db.setup :: Running Database Migrations...
2022-02-17 19:21:45,625 INFO db.setup :: Setting up Liquibase...
2022-02-17 19:21:45,675 INFO db.setup :: Liquibase is ready.
2022-02-17 19:21:45,693 INFO db.liquibase :: Checking if Database has unrun migrations...
2022-02-17 19:21:47,199 INFO db.setup :: Database Migrations Current ...
2022-02-17 19:21:47,227 INFO db.data-migrations :: Running all necessary data migrations, this may take a minute.
2022-02-17 19:21:47,237 INFO db.data-migrations :: Finished running data migrations.
Database setup took 2.0 s
2022-02-17 19:21:47,473 INFO metabase.events :: Starting events listener: :metabase.events.dependencies/Dependencies
2022-02-17 19:21:47,480 INFO metabase.events :: Starting events listener: :metabase.events.activity-feed/ActivityFeed
2022-02-17 19:21:47,484 INFO metabase.events :: Starting events listener: :metabase.events.metabot-lifecycle/MetaBotLifecycle
2022-02-17 19:21:47,487 INFO metabase.events :: Starting events listener: :metabase.events.last-login/LastLogin
2022-02-17 19:21:47,490 INFO metabase.events :: Starting events listener: :metabase.events.notifications/Notifications
2022-02-17 19:21:47,492 INFO metabase.events :: Starting events listener: :metabase.events.sync-database/Sync
2022-02-17 19:21:47,494 INFO metabase.events :: Starting events listener: :metabase.events.driver-notifications/DriverNotifications
2022-02-17 19:21:47,495 INFO metabase.events :: Starting events listener: :metabase.events.revision/Revisions
2022-02-17 19:21:47,496 INFO metabase.events :: Starting events listener: :metabase.events.view-log/ViewLog
2022-02-17 19:21:47,720 INFO metabase.task :: Initializing task SyncDatabases
2022-02-17 19:21:47,849 INFO metabase.task :: Initializing task CheckForNewVersions
2022-02-17 19:21:47,871 INFO metabase.task :: Initializing task SendAnonymousUsageStats
2022-02-17 19:21:47,885 INFO metabase.task :: Initializing task SendAbandomentEmails
2022-02-17 19:21:47,902 INFO metabase.task :: Initializing task SendPulses
2022-02-17 19:21:47,917 INFO metabase.task :: Initializing task SendFollowUpEmails
2022-02-17 19:21:47,931 INFO metabase.task :: Initializing task TaskHistoryCleanup
2022-02-17 19:21:47,950 INFO driver.impl :: Initializing driver :sql...
2022-02-17 19:21:47,951 INFO driver.impl :: Initializing driver :sql-jdbc...
2022-02-17 19:21:47,953 INFO driver.impl :: Initializing driver :h2...
2022-02-17 19:21:47,969 INFO metabase.core :: Metabase Initialization COMPLETE
2022-02-17 19:21:50,994 INFO i18n.impl :: Reading available locales from locales.clj...
2022-02-17 19:22:08,338 DEBUG middleware.log :: GET /api/user/current 401 6.2 ms (0 DB calls)
"Unauthenticated"

2022-02-17 19:22:08,344 DEBUG middleware.log :: GET /api/session/properties 200 8.9 ms (0 DB calls) App DB connections: 0/4 Jetty threads: 8/50 (1 idle, 0 queued) (45 total active threads) Queries in flight: 0 (0 queued)
2022-02-17 19:23:49,617 DEBUG middleware.log :: GET /api/user/current 401 497.3 ╡s (0 DB calls)
"Unauthenticated"

2022-02-17 19:23:49,623 DEBUG middleware.log :: GET /api/session/properties 200 5.2 ms (0 DB calls) App DB connections: 0/4 Jetty threads: 8/50 (0 idle, 0 queued) (44 total active threads) Queries in flight: 0 (0 queued)
2022-02-17 19:24:04,261 DEBUG middleware.log :: POST /api/session 200 1.2 s (7 DB calls) App DB connections: 0/4 Jetty threads: 7/50 (0 idle, 0 queued) (45 total active threads) Queries in flight: 0 (0 queued)
2022-02-17 19:24:04,305 DEBUG middleware.log :: GET /api/session/properties 200 15.6 ms (2 DB calls) App DB connections: 0/4 Jetty threads: 8/50 (0 idle, 0 queued) (46 total active threads) Queries in flight: 0 (0 queued)
2022-02-17 19:24:04,584 DEBUG middleware.log :: GET /api/user/current 200 295.3 ms (3 DB calls) App DB connections: 0/4 Jetty threads: 7/50 (0 idle, 0 queued) (46 total active threads) Queries in flight: 0 (0 queued)
2022-02-17 19:24:04,638 DEBUG middleware.log :: GET /api/database 200 37.5 ms (4 DB calls) App DB connections: 0/4 Jetty threads: 7/50 (0 idle, 0 queued) (46 total active threads) Queries in flight: 0 (0 queued)
2022-02-17 19:24:04,810 DEBUG middleware.log :: GET /api/collection/root/items 200 152.4 ms (4 DB calls) App DB connections: 0/4 Jetty threads: 7/50 (0 idle, 0 queued) (46 total active threads) Queries in flight: 0 (0 queued)
2022-02-17 19:24:04,994 WARN metabase.email :: Failed to send email
java.lang.Exception: SMTP host is not set.
at metabase.email$fn__54986$send_message_or_throw_BANG___54991$fn__54995.invoke(email.clj:95)
at metabase.email$fn__54986$send_message_or_throw_BANG___54991.invoke(email.clj:89)
at metabase.email$send_message_BANG_.invokeStatic(email.clj:127)
at metabase.email$send_message_BANG_.doInvoke(email.clj:113)
at clojure.lang.RestFn.invoke(RestFn.java:619)
at metabase.email.messages$send_login_from_new_device_email_BANG_.invokeStatic(messages.clj:218)
at metabase.email.messages$send_login_from_new_device_email_BANG_.invoke(messages.clj:204)
at metabase.models.login_history$maybe_send_login_from_new_device_email$fn__55878.invoke(login_history.clj:77)
at clojure.core$binding_conveyor_fn$fn__5772.invoke(core.clj:2034)
at clojure.lang.AFn.call(AFn.java:18)
at java.base/java.util.concurrent.FutureTask.run(Unknown Source)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at java.base/java.lang.Thread.run(Unknown Source)
2022-02-17 19:24:05,043 DEBUG middleware.log :: GET /api/collection/root 200 10.6 ms (2 DB calls) App DB connections: 0/4 Jetty threads: 7/50 (0 idle, 0 queued) (46 total active threads) Queries in flight: 0 (0 queued)
2022-02-17 19:24:05,155 DEBUG middleware.log :: GET /api/collection/root/items 200 25.7 ms (4 DB calls) App DB connections: 0/4 Jetty threads: 7/50 (0 idle, 0 queued) (46 total active threads) Queries in flight: 0 (0 queued)
2022-02-17 19:24:05,214 DEBUG middleware.log :: GET /api/database 200 3.8 ms (3 DB calls) App DB connections: 0/4 Jetty threads: 7/50 (0 idle, 0 queued) (46 total active threads) Queries in flight: 0 (0 queued)
2022-02-17 19:24:05,815 DEBUG middleware.log :: GET /api/automagic-dashboards/database/2/candidates 200 579.7 ms (7 DB calls) App DB connections: 0/4 Jetty threads: 7/50 (0 idle, 0 queued) (46 total active threads) Queries in flight: 0 (0 queued)
2022-02-17 19:24:10,263 DEBUG middleware.log :: GET /api/setting 200 10.2 ms (0 DB calls) App DB connections: 4/4 Jetty threads: 8/50 (0 idle, 0 queued) (46 total active threads) Queries in flight: 0 (0 queued)
2022-02-17 19:24:10,265 DEBUG middleware.log :: GET /api/session/properties 200 16.2 ms (2 DB calls) App DB connections: 4/4 Jetty threads: 8/50 (0 idle, 0 queued) (46 total active threads) Queries in flight: 0 (0 queued)
2022-02-17 19:24:10,471 DEBUG middleware.log :: GET /api/setup/admin_checklist 200 35.9 ms (13 DB calls) App DB connections: 2/7 Jetty threads: 7/50 (0 idle, 0 queued) (47 total active threads) Queries in flight: 0 (0 queued)
2022-02-17 19:24:12,409 DEBUG middleware.log :: GET /api/permissions/group 200 10.7 ms (3 DB calls) App DB connections: 1/7 Jetty threads: 7/50 (0 idle, 0 queued) (47 total active threads) Queries in flight: 0 (0 queued)
2022-02-17 19:24:12,451 DEBUG middleware.log :: GET /api/user 200 10.2 ms (4 DB calls) App DB connections: 1/7 Jetty threads: 7/50 (0 idle, 0 queued) (47 total active threads) Queries in flight: 0 (0 queued)
2022-02-17 19:24:12,488 DEBUG middleware.log :: GET /api/permissions/membership 200 1.5 ms (1 DB calls) App DB connections: 2/7 Jetty threads: 7/50 (0 idle, 0 queued) (47 total active threads) Queries in flight: 0 (0 queued)
2022-02-17 19:24:16,240 DEBUG middleware.log :: GET /api/setting 200 982.4 ╡s (0 DB calls) App DB connections: 1/7 Jetty threads: 7/50 (0 idle, 0 queued) (47 total active threads) Queries in flight: 0 (0 queued)
2022-02-17 19:24:16,301 DEBUG middleware.log :: GET /api/session/properties 200 12.5 ms (2 DB calls) App DB connections: 2/7 Jetty threads: 9/50 (0 idle, 0 queued) (48 total active threads) Queries in flight: 0 (0 queued)
2022-02-17 19:24:16,361 DEBUG middleware.log :: GET /api/setup/admin_checklist 200 28.3 ms (13 DB calls) App DB connections: 4/7 Jetty threads: 9/50 (1 idle, 0 queued) (49 total active threads) Queries in flight: 0 (0 queued)
2022-02-17 19:24:30,465 DEBUG middleware.log :: GET /api/user/current 401 486.0 ╡s (0 DB calls)
"Unauthenticated"

2022-02-17 19:24:30,482 DEBUG middleware.log :: GET /api/session/properties 200 6.0 ms (0 DB calls) App DB connections: 0/7 Jetty threads: 7/50 (3 idle, 0 queued) (51 total active threads) Queries in flight: 0 (0 queued)

Hi @endurancezone
I would highly recommend that you setup a reverse-proxy that can automatically handle certificate and renewal with LetsEncrypt or similar.
It is much easier than trying to work with a self-signed certificate and KeyStore.

@flamber Thanks was able to get certbot installed and key generated. Though when I modify the startup to point to the newly issued cert it prompts for an SSL password, though there is not one?

@endurancezone KeyStore (and TrustStore) are huge technical areas and not specific to Metabase, so I would recommend that you search the internet if you want to go down that route. I can only recommend using a reverse-proxy.