Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (athena.apache.org: local policy includes SPF record at
 spf.trusted-forwarder.org)
Date: Wed, 30 Oct 2013 10:42:31 -0400 (EDT)
From: Chris Arnold <carnold@electrichendrix.com>
To: Tomcat Users List <users@tomcat.apache.org>
Message-ID: <1714804254.72101.1383144151159.JavaMail.root@electrichendrix.com>
In-Reply-To: <526CDFCF.4020702@gmail.com>
References: <843270989.22099.1382823557406.JavaMail.root@electrichendrix.com>
 <526C467E.1020001@gmail.com>
 <881752998.23178.1382834823926.JavaMail.root@electrichendrix.com>
 <526CDFCF.4020702@gmail.com>
Subject: Re: Secure Tomcat With SSL
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Thread-Topic: Secure Tomcat With SSL
Thread-Index: FoXiXmGKstOT7XdRRQPWWRfDhvWiHA==

>Chris,

Thank you for taking the time to help me in securing tomcat. I called godaddy and they instructed me to download the tomcat cert, which i did, and follow their provided instructions:
http://support.godaddy.com/help/article/5239/generating-a-csr-and-installing-an-ssl-certificate-in-tomcat-4x5x6x?locale=en

I skipped generating a keystore and csr in tomcat and went directly to install ssl in tomcat (generating a csr and keystore = tomcat already has a keystore, no? I already have generated the csr with godaddy (thats how i got the cert, no?)

So in installing ssl in tomcat, i run the 1st command:
keytool -import -alias root -keystore tomcat.keystore -trustcacerts -file /root/2b05f72c7ddd37/gd_bundle.crt (this is the root cert according to rep with godaddy)
and get this:

Enter keystore password:
keytool error: java.lang.Exception: Certificate not imported, alias <root> already exists

Then:
./keytool -import -alias intermed -keystore tomcat.keystore -trustcacerts -file /root/2b05f72c7ddd37/gd_intermediate.crt
and get this:

Enter keystore password:
Certificate already exists in keystore under alias <root>
Do you still want to add it? [no]:  y
Certificate was added to keystore

Then:
./keytool -import -alias tomcat -keystore tomcat.keystore -trustcacerts -file /root/2b05f72c7ddd37//2b05f72c7ddd37.crt
and get this:

Enter keystore password:
keytool error: java.lang.Exception: Certificate not imported, alias <tomcat> already exists

Not sure where to go from here! Can anyone help? I just want to do something basic and that issecure tomcat with a godaddy SSL cert.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org