Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (herse.apache.org: local policy)
From: "Andrew Friebel" <andrewf@reynolds.com.au>
To: "'Andy Tipton'" <artipton@tiptonshome.com>,
	"'Tomcat Users List'" <users@tomcat.apache.org>
Subject: RE: Need help w/ installing certificate.
Date: Wed, 15 Nov 2006 10:32:56 +1100
Message-ID: <003c01c70845$36782e80$21951e0a@andrewf>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
In-Reply-To: <005d01c70785$bdfd08f0$c801a8c0@tipton.com>
Importance: Normal

When you create a keystore, you get prompted with information regarding
your server.  This is your server certificate, and it identifies your
server to other users.

You would have created a certificate sign request that you sent to your
CA to get your certificate signed.  You sign your certificate so as
others that trust your CA know that they can trust you.  When you have a
signed certificate, you need to import the CA certificate into your
keystore to enable a trust chain.

Once you have imported the CA certificate, then you need to import your
signed certificate into your keystore (ensure you use the same alias
when you created your certificate).  You keystore should list this
certificate as the 'keyEntry' when you list your keystore, and this will
be the certificate presented to users when they access your server using
SSL.

Do not forget to enable tomcat to use SSL in the server.xml file.  It
may be a good idea for you to do internal testing using self signed
certificates to understand them before getting them signed by a CA.

Regards,
Andrew Friebel

-----Original Message-----
From: Andy Tipton [mailto:artipton@tiptonshome.com] 
Sent: Tuesday, 14 November 2006 11:42 AM
To: 'Tomcat Users List'
Subject: Need help w/ installing certificate.

Afternoon,
 
            I have my real certificate downloaded.  I am trying to
install
it into my keystore so that is the one to be used. however, I am can't
get
it to work.  Please help!!  
 
            I am running these commands but I cannot get the keystore to
look at the new certificate..
 
C:\Program Files\Java\jdk1.5.0_05\bin>keytool -import -alias intermed
-keystore .keystore -trustcacerts -file sf_issuing.crt
C:\Program Files\Java\jdk1.5.0_05\bin>keytool -import -alias tomcat5
-keystore .keystore -trustcacerts -file www.anythingphotos.com.crt
 
I have tried creating a new '.keystore', but no luck.  
 
Could someone please help!! I am running out of ideas.
 

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org