Re: tomcat problems with SSL / PKCS12

2004-09-21 Thread Dennis Dai
On 9/21/2004 6:41 PM, [EMAIL PROTECTED] wrote: On Tue, 21 Sep 2004, Dennis Dai wrote: Ok here's the deal with openssl. I'm using OpenSSL 0.9.7d and J2SE 1.4.2_05. Assuming: * server.key - your certificate's private key * server.crt - your certificate * inter.crt - the intermediate CA that signed

Re: tomcat problems with SSL / PKCS12

2004-09-21 Thread kallen
On Tue, 21 Sep 2004, Dennis Dai wrote: Ok here's the deal with openssl. I'm using OpenSSL 0.9.7d and J2SE 1.4.2_05. Assuming: * server.key - your certificate's private key * server.crt - your certificate * inter.crt - the intermediate CA that signed your certificate * root.crt - the root CA that

Re: tomcat problems with SSL / PKCS12

2004-09-21 Thread kallen
e the .p12 from the server cert provided by verisign: openssl pkcs12 -export -inkey server.key -in server.crt -name tomcat \ -out server.p12 then i place server.p12 and intermediateCA.crt onto a windows box, fire up IE. in IE: Internet Options -> Content -> Certificates... under Personal ta

Re: tomcat problems with SSL / PKCS12

2004-09-21 Thread Dennis Dai
ediate CA First, concatenate the CA certs, make sure the intermediate CA goes first: $ cat inter.crt root.crt > chain.crt Next, export the pkcs12 file: $ openssl pkcs12 -export -chain -inkey server.key -in server.crt\ -name "server" -CAfile chain.crt -out server.p12 When prompt for export p

Re: tomcat problems with SSL / PKCS12

2004-09-21 Thread Dennis Dai
em description to my attempts with using pkcs12, not JKS. the players: linux, tomcat-5.0.27, IBMJava2-141, cert SSL generated with openssl. i generated the CSR for my site with openssl, and got the server cert from verisign. fwiw, the Issuer line from the cert: Issuer: O=VeriSign Trust Network, O

Re: tomcat problems with SSL / PKCS12

2004-09-21 Thread kallen
tho i can. also, i have done much googling, and have tried many of the suggestions, to no avail. i'll limit my problem description to my attempts with using pkcs12, not JKS. the players: linux, tomcat-5.0.27, IBMJava2-141, cert CSR generated with openssl, not keytool. i got the server cert from

tomcat problems with SSL / PKCS12

2004-09-21 Thread kallen
y attempts with using pkcs12, not JKS. the players: linux, tomcat-5.0.27, IBMJava2-141, cert SSL generated with openssl. i generated the CSR for my site with openssl, and got the server cert from verisign. fwiw, the Issuer line from the cert: Issuer: O=VeriSign Trust Network, OU=VeriSign, Inc., OU=V

PKCS12 Keystore

2004-02-25 Thread paul . spinelli
Hi, I'm trying to setup a keystore of type pkcs12 using the java keytool. I enter this command 'keytool -genkey -keystore c:\tomcat -storetype PKCS12 -alias tomcat'. Well, everytime I try and enter in the subject information for the keys and finish the process, the keyt

TOMCAT4 and Connector with pkcs12

2002-07-21 Thread Kikuyo Nagamatsu
Hello all, I have a question. I want to use pkcs12 certificate for the SSL certificate. So I tried to add the configuration of 'keystoreType' in server.xml: But catalina.out said as following: eException: pkcs12 not found java.security.KeyStoreException: pkcs12

Tomcat - SSL - PKCS12 keystore

2001-03-15 Thread Alexander Jesse
Hi, I am trying to setup a Tomcat 3.2.1 for SSL. This works fine using the standard java keystore (JKS). Unfortunately I have to use a PKCS12-format certificate. According to some hint on the net, java can understand this certificate as a PKCS12 keystore type. Has somebody already set up a

PKCS12

2001-02-15 Thread Julie Ruiz
Hi, Tomcat use SSL directly, I use the keytool of the JDK to generate the key pair and a self certificate. I need to generate certificates for clients but the browser says that if have to be in the format PKCS12. For the keytool I specify a keystore type at the command line, via the -storetype