tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From /U <uma...@comcast.net>
Subject Re: Installing certificate chain on Tomat
Date Sat, 10 Apr 2010 16:19:38 GMT

Thank you for the suggestion. could you pl share your connection
configuration?
also, if no explicit truststore is set in the configuration,would the SSL
connector
not fall back to JRE truststore which is $JAVA_HOME/jre/lib/security/cacerts
?

Also, did you install the private key andthe identity cert in keystoreFile
and the CA cert chain in truststorefile?

many thanks!

/U

dockeryjavaman wrote:
> 
> i had to install my ca root certs in a keystore specificed/referenced by
> the "truststorefile" parameter
>   NOT the keystorefile parm
> 
> 
> 
> ________________________________
> From: /U <uma_rk@comcast.net>
> To: users@tomcat.apache.org
> Sent: Sat, April 10, 2010 10:07:47 AM
> Subject: Re: Installing certificate chain on Tomat
> 
> 
> hello Pid,
> 
> am i right in assuming that the identity certificate+private key is
> installed
> in  keystoreFile of the SSL connector (C:\keystore below) and the CA 
> certificate chain is installed in jre/lib/security/cacerts?
> 
>      <Connector port="443"
>                protocol="HTTP/1.1" SSLEnabled="true"
>                maxThreads="150" scheme="https" secure="true"
>                clientAuth="false" sslProtocol="TLS"
>                keystoreFile="C:\keystore" keystorePass="changeit"
>      />
> 
> 
> any assistance appreciated,
> 
> /U
> 
> 
> -----Original Message-----
>> From: "/U" [uma_rk@comcast.net]
>> Date: 04/10/2010 12:02 AM
>> To: users@tomcat.apache.org
>> Subject: Re: Installing certificate chain on Tomat
>>
>> Note: Original message sent as attachment
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
> 
> 
> 
> -- 
> 
> --
> pidster.com
> 
> 
> 
> -- 
> View this message in context:
> http://old.nabble.com/Installing-certificate-chain-on-Tomat-tp28199836p28202227.html
> Sent from the Tomcat - User mailing list archive at Nabble.com.
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
> 
> 
>       
> 

-- 
View this message in context: http://old.nabble.com/Installing-certificate-chain-on-Tomat-tp28199836p28203076.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message