tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Fabien COMBERNOUS <fcombern...@kezia.com>
Subject Re: tomcat6 and https [solved]
Date Tue, 09 Feb 2010 16:24:20 GMT
Mark Thomas wrote:
> On 09/02/2010 16:01, Fabien COMBERNOUS wrote:
>   
>> Fabien COMBERNOUS wrote:
>>     
>>> Mark Thomas wrote:
>>>       
>>>> You imported the certificate but not the key. Your can't import the key
>>>> via the command line. You need to use something like this:
>>>> http://www.agentbob.info/agentbob/79-AB.html?branch=1&language=1
>>>>
>>>>   
>>>>         
>>> Hum ... i can export my cert and key to pkcs12. tomcat documents says
>>> it is possible to use pkcs12. pkcs12 stores private keys with
>>> accompanying public key certificates. So i don't have to use external
>>> tools like you suggest. Isn't it ?
>>>       
>> I did this and with pkcs12 all is running well. Don't forget to set
>> keystoreType="PKCS12", default is JKS.
>>
>> Thank you for your help.
>>     
>
> Great. Looks like keytool has been updated. That is good news.
>   
I didn't used keytool but only openssl.
I converted my certificate used by apache and the private key into pkcs12.
Then tomcat can directly use pkcs12 if you set the keystoreType value to 
PKCS12.

-- 
*Fabien COMBERNOUS*
/unix system engineer/
www.kezia.com <http://www.kezia.com/>
*Tel: +33 (0) 467 992 986*
Kezia Group

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message