Re: Importing certificate to truststore

2011-03-21 Thread David Patricola
I updated jrun.xml to have SSL turned on and restarted the service no problem: That's unrelated to this. That lets you use the built-in JRun web server to allow SSL/TLS connections. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is

Re: Importing certificate to truststore

2011-03-21 Thread Dave Watts
So this XML is only for https not a secure database connection?  What about the keystore and truststore shortcuts? Yes, it's only for letting the JRun web server accept HTTPS connections. Everything running within the same JVM uses the same keystore, and SSL/TLS requires keys and certificates

Re: Importing certificate to truststore

2011-03-21 Thread David Patricola
So this XML is only for https not a secure database connection?  What about the keystore and truststore shortcuts? Yes, it's only for letting the JRun web server accept HTTPS connections. Everything running within the same JVM uses the same keystore, and SSL/TLS requires keys and

RE: Importing certificate to truststore

2011-03-21 Thread Bobby Hartsfield
This is what I generally use. C: C:\Program Files\Java\jdk1.6.0_24\bin\keytool -delete -noprompt -trustcacerts -alias domain.com.cer -keystore C:\Program Files\Java\jdk1.6.0_24\jre\lib\security\cacerts -storepass [password] C:C:\Program Files\Java\jdk1.6.0_24\bin\keytool -import -noprompt

Re: Importing certificate to truststore

2011-03-21 Thread David Patricola
This is what I generally use. C: C:\Program Files\Java\jdk1.6.0_24\bin\keytool -delete -noprompt -trustcacerts -alias domain.com.cer -keystore C:\Program Files\Java\jdk1.6.0_24\jre\lib\security\cacerts -storepass [password] C:C:\Program Files\Java\jdk1.6.0_24\bin\keytool -import -noprompt

Re: Importing certificate to truststore

2011-03-18 Thread David Patricola
It seems that I have to import a single certificate (all articles I find refer in the singular).  So if I had to choose between root.crt or server.crt file, which one would be installed? Well, I'm not sure it will matter, actually. If you import the root certificate to the store, the

RE: Importing certificate to truststore

2011-03-18 Thread Bobby Hartsfield
You did restart CF, correct? .:.:.:.:.:.:.:.:.:.:.:.:.:. Bobby Hartsfield http://acoderslife.com http://cf4em.com -Original Message- From: David Patricola [mailto:david.patric...@jefferson.edu] Sent: Friday, March 18, 2011 1:23 PM To: cf-talk Subject: Re: Importing certificate

Re: Importing certificate to truststore

2011-03-18 Thread David Patricola
You did restart CF, correct? .:.:.:.:.:.:.:.:.:.:.:.:.:. Bobby Hartsfield http://acoderslife.com http://cf4em.com onsite Thanks for the insight! I've coverted root.crt to .cre and imported it but still am unable to connect. Is there a CF log that provides a better error description than

Re: Importing certificate to truststore

2011-03-18 Thread Dave Watts
I updated jrun.xml to have SSL turned on and restarted the service no problem: service class=jrun.servlet.http.SSLService name=SSLService    attribute name=port1701/attribute    attribute name=interface*/attribute    attribute name=keyStore{jrun.rootdir}/lib/security/keystore/attribute    

Importing certificate to truststore

2011-03-17 Thread David Patricola
I have a remote db server's 2 .crt and .key files and am ready to store them into the CF8 Enterprise truststore for Postgre SSL connectivity (self-signed, too). I have read a few articles about importing using the keytool but have zero Java knowledge. 1. What is the purpose of the keystore

Re: Importing certificate to truststore

2011-03-17 Thread Dave Watts
I have a remote db server's 2 .crt and .key files and am ready to store them into the CF8 Enterprise truststore for Postgre SSL connectivity (self- signed, too).  I have read a few articles about importing using the keytool but have zero Java knowledge. 1. What is the purpose of the

Re: Importing certificate to truststore

2011-03-17 Thread David Patricola
I have a remote db server's 2 .crt and .key files and am ready to store them into the CF8 Enterprise truststore for Postgre SSL connectivity (self- signed, too).  I have read a few articles about importing using the keytool but have zero Java knowledge. 1. What is the purpose of the

Re: Importing certificate to truststore

2011-03-17 Thread Dave Watts
I have the certificates going on 2 different servers but they're load-balanced, so however I implement the certs on one box I can do on the other. If you're using the same certificate on each box (which you can usually do in a load-balanced environment) you only have to import it once.  If

Re: Importing certificate to truststore

2011-03-17 Thread David Patricola
I have a remote db server's 2 .crt and .key files and am ready to store them into the CF8 Enterprise truststore for Postgre SSL connectivity (self- signed, too).  I have read a few articles about importing using the keytool but have zero Java knowledge. 1. What is the purpose of the

Re: Importing certificate to truststore

2011-03-17 Thread Dave Watts
It seems that I have to import a single certificate (all articles I find refer in the singular).  So if I had to choose between root.crt or server.crt file, which one would be installed? Well, I'm not sure it will matter, actually. If you import the root certificate to the store, the store