I like using portecle [1]. It's a small java gui app to manage java
certstores. You can also test a SSL/TLS handshakes with another server
based on the certstore, verify certs and crls etc. I have not used
keytool since i found the tool.
For intensive SSL and cert debugging i also use the "openssl s_client"
command and sometimes curl.
As far a i know the order of certificates in a file should be
your-ca
intermideate-ca
root-ca
Cheers,
Joachim
[1] http://portecle.sourceforge.net/
Am 08.08.2010 20:44, schrieb Julien Cochennec:
Hi,
We have Wildcard certificate for our app, and we need to add it to
trusted certificates in the Java_Home of the CAS server.
That certificate is from Startcom that also bundles a list of
intermediate chain CA certificates.
I read the Esup documentation and I'm going to make a bundle with my app
certificate and the chain right after, using only ---Begin
certificate---/---End Certficate parts.
How can I check the order is right?
How can I test JSSE connection from a client?
Thanks.
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user