Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (nike.apache.org: local policy)
Message-ID: <46D6E35C.8000803@l-mx.de>
Date: Thu, 30 Aug 2007 17:33:48 +0200
From: Christoph Lechner <cl0039@l-mx.de>
User-Agent: Thunderbird 1.5.0.9 (X11/20061206)
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: Tomcat keeps breaking/SSL keystore troubles
References: <46D6DE34.1030706@l-mx.de> <46D6E0B0.60409@hanik.com>
In-Reply-To: <46D6E0B0.60409@hanik.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Filip Hanik - Dev Lists wrote:
> my guess is that the keystore file doesn't contain your private key,
Hi,

that's right. Actually the file sent to the CA was created using OpenSSL
(as far as I remember). So the keystore isn't the one used to create the
CSR. Among the files I have at the moment, there's a .key file, but how
to import it?

When I dump the self signed certificate that is known to work, I get:
dummy@ab-server1:/tmp$ keytool -list -keystore my.keystore
Enter keystore password:  changeit

Keystore type: jks
Keystore provider: SUN

Your keystore contains 1 entry

tomcat, Jul 19, 2007, keyEntry,
Certificate fingerprint (MD5):
1D:31:E7:09:DF:AC:ED:B2:A7:09:36:06:E9:B6:69:DD

BTW: Looks like it's the same problem like in the thread "Re: Problems
with SSL-enabled Tomcat 5.5"

CU
- C. Lechner


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org