[
https://issues.apache.org/jira/browse/OPENMEETINGS-2199?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17069953#comment-17069953
]
LUIZ AUGUSTO MACHADO commented on OPENMEETINGS-2199:
----------------------------------------------------
[~hrenato] I resold the problem with this:
*2) PKCS#7*
If the certificate was received in PKCS7 format (usually it has *.cer or *.p7b
extension), which includes the certificate issued for you domain with the CA
certificates, you need import it in the keystore:
keytool -import -trustcacerts -alias tomcat -file yourcertificate.p7b -keystore
yourkeystore.jks
Note: Ensure to import the PKCS7 certificate (.p7b file) with same alias as the
one for the Private key (.key file) which is already in keystore after creating
CSR.
Otherwise, an Input not an X.509 certificate error may occur.
If the certificate is imported successfully, and the keystore is completed, you
should see the message:
Certificate reply was installed in keystore
To check the certificates which are added in the keystore run the command below:
keytool -list -keystore yourkeystore.jks -v
To review the certificates added to the keystore as a plain text run the
following command:
keytool -list -rfc -keystore yourkeystore.jks
Once the the keystore is completed, you will need to describe it in the
configuration of your tomcat.
Usually tomcat’s configuration file is named server.xml.
Open it as a plain text and create there a record like below:
<Connector port="443" protocol="HTTP/1.1"
SSLEnabled="true"
scheme="https" secure="true" clientAuth="false"
sslProtocol="TLS" keystoreFile="/your_path/yourkeystore.jks"
keystorePass="password_for_your_key_store" />
Restart tomcat to apply the changes and make the certificate work.
Thank you very much, [~solomax] someone needs to update the information here
[https://openmeetings.apache.org/HTTPS.html] Tomcat is only possible to assign
by PKCS#7
> SSL PROBLEM
> ------------
>
> Key: OPENMEETINGS-2199
> URL: https://issues.apache.org/jira/browse/OPENMEETINGS-2199
> Project: Openmeetings
> Issue Type: Bug
> Components: Installer
> Affects Versions: 5.0.0-M3
> Reporter: LUIZ AUGUSTO MACHADO
> Assignee: Maxim Solodovnik
> Priority: Major
> Attachments: keystore_values.txt
>
>
> We are following the steps to use a real SSL certificate we imported all how
> the guide asks us see [^keystore_values.txt] but is not working, it is not
> reading the root and the intermediate. I use Centos 7 the openmeetings is in
> a folder called *online*
> [www.iutestcenter.com:5443/online|http://www.iutestcenter.com:5443/online] we
> made a certificate for iutestcenter.com
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
