Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (athena.apache.org: domain of pid@pidster.com designates
 209.85.212.173 as permitted sender)
Message-ID: <4F0B41BA.2010103@pidster.com>
Date: Mon, 09 Jan 2012 19:36:26 +0000
From: Pid <pid@pidster.com>
Organization: Pidster Inc
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7;
 rv:8.0) Gecko/20111105 Thunderbird/8.0
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: SSL Certificate Update Not Reflected on the Website
References: <003901ccceb8$21a186c0$64e49440$@xtra.co.nz>
 <-4021679879387379885@unknownmsgid>
 <004101cccebb$a0704420$e150cc60$@xtra.co.nz>
In-Reply-To: <004101cccebb$a0704420$e150cc60$@xtra.co.nz>
OpenPGP: id=62590808
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="------------enig28C9A5101993994906871F07"

--------------enig28C9A5101993994906871F07
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On 09/01/2012 10:44, Conway Liu wrote:
> Hi Pid,
>=20
> I tried different browsers, and tried different computers.
>=20
> What command line tool are you talking about?

Something like: curl or openssl


p

> Thanks
> Conway
>=20
> -----Original Message-----
> From: Pid * [mailto:pid@pidster.com]=20
> Sent: Monday, 9 January 2012 11:37 p.m.
> To: Tomcat Users List
> Subject: Re: SSL Certificate Update Not Reflected on the Website
>=20
> On 9 Jan 2012, at 10:20, Conway Liu <cliu@xtra.co.nz> wrote:
>=20
>> Hi,
>>
>> We used to use Thawte for our SSL certificate. Today I installed new=20
>> SSL certificate issued by VeriSign and there were no errors. The=20
>> primary and secondary intermediate CAs both imported into the keystore=
=20
>> file properly, and then the SSL issued by VeriSign imported as well. I=
=20
>> updated the server.xml to indicate the new keystore file with the keys=
tore password.
>> Started Tomcat, checked the log files and there were no errors. But=20
>> when I browse to the website, it is still saying the SSL has expired=20
>> and it's showing the one issued by Thawte.
>>
>> I tried to put an incorrect keystore password in server.xml and Tomcat=
=20
>> did generate errors in the log file, which means Tomcat is looking at =

>> the correct keystore file.
>>
>> We have also tried to reboot the server in case the old SSL was cached=
=20
>> somewhere but that didn't help.
>>
>> Does anyone have any suggestion where might be wrong?
>=20
> Which browser are you using? Some cache Certs and don't reflect the cha=
nge immediately.
>=20
> Have you tried with a command line tool?
>=20
>=20
> p
>=20
>=20
>>
>>
>>
>> Thank you very much
>>
>> Conway
>>
>=20
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>=20
>=20
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>=20


--=20

[key:62590808]


--------------enig28C9A5101993994906871F07
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBCgAGBQJPC0HAAAoJEGoM2OGpOvr9J64P/0XFsFLHDipMuEX5onO2kELd
OFF4gbPyF7ukkFig80WAe+IdttMdLLeI+klW9lYdl2Vr7Oee89mgEuPIEE+hds0Q
dRbppiwxy65rx09L3K1ZMfHlE6TfNbyfn0H3vroAysJ/OdL0i8vgjl+9UASrN1zw
RTB1D1lrYjVpu23Oz8ivXDeDoH5qepFX3ySD0gpLrVLVhHOY8umEeOIByXUJYwBs
bogBehTMI320OxD+Zd+hmdkJFuQh8yuAhGo/NzcGDUtpFb6WgaZ5AlSkaHjShFaI
r/01cRmFXEMEYmmeb7z/gYhYn7YmRq8oYxbENUlpsiI+P4vHbvo8DZGunhDovgWt
8+MNffrQ4Lc2v4FLulTIHnzJb/BGhvzjUsBkBMe7Fl7l2P6WqmPd8RzV2Pnbe94u
P+GctKw87ybLiBLYF0gh+IEor0K22BAyUT8yGh9anW1+efnjd8Mba3TyqWF5ANr5
caAm9gXWqWzJlERhqUrQbrxAUfFyj7tFL+xEQ5+KCEhi/Dx3UrGkxtkTsL5No3Bm
gFx0VYvsVSnN6GvCOMZVZinuaAxyhOanlmn2Tqkc6Ye2FTJtSoIDOOS2iqi45AB6
mv/JrQQ2cjbrTdwFBDJ8GEc1BBizDZCLhTjy7w+hp7xyxgfyyzOkRVfiE0IOBk72
Q5C2OJvZGhNXj9LkPbKl
=kU21
-----END PGP SIGNATURE-----

--------------enig28C9A5101993994906871F07--