I like using portecle [1]. It's a small java gui app to manage java certstores. You can also test a SSL/TLS handshakes with another server based on the certstore, verify certs and crls etc. I have not used keytool since i found the tool. For intensive SSL and cert debugging i also use the "openssl s_client" command and sometimes curl.

As far a i know the order of certificates in a file should be

your-ca
intermideate-ca
root-ca

Cheers,

Joachim

[1] http://portecle.sourceforge.net/

Am 08.08.2010 20:44, schrieb Julien Cochennec:
Hi,
We have Wildcard certificate for our app, and we need to add it to
trusted certificates in the Java_Home of the CAS server.
That certificate is from Startcom that also bundles a list of
intermediate chain CA certificates.
I read the Esup documentation and I'm going to make a bundle with my app
certificate and the chain right after, using only ---Begin
certificate---/---End Certficate parts.
How can I check the order is right?
How can I test JSSE connection from a client?
Thanks.



--
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to