I have a couple of sites using Thawte SSL certs on Tomcat 4.0.1.
These steps have been discussed a week or so ago.

keytool -genkey -alias tomcat -keyalg RSA
keytool -certreq -alias tomcat -file my.csr
<paste this into the signing authority request, you get back a cert that
you paste into a new file, i.e. mySigned.cer>

make sure the Thawte root CA cert in you keystore or cacerts file as a
trusted certificate.
e.g.
keytool -import -keystore java/jre/lib/security/cacerts -alias
ThawteRootCert -file ThawteRootCertificate.cer

keytool -import -trustcacerts -alias tomcat -file mySigned.cer

David

-----Original Message-----
From: Brian Adams [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, 29 January 2002 1:02 PM
To: Tomcat Users List
Subject: RE: SSL and certificates, AGAIN


I hae not done this yet, but I want to learn.  Can we try and keep it on the
list?  I am a few weeks before I get a signed cert (www.geotrust.com
cheaper I think) so please keep me in the loop.  All I have learned so far
is self-signed certs.
Thanks,
B

-----Original Message-----
From: Richard S. Huntrods [mailto:[EMAIL PROTECTED]]
Sent: Monday, January 28, 2002 8:58 PM
To: [EMAIL PROTECTED]
Subject: SSL and certificates, AGAIN


Greetings!

Three quick question to all who have SSL working with signed
certificates (not just self-signed):

1. What provider did you use? Verisign, Entrust, Thawte, etc?

2. Has anyone gotten signed certificates working with Thawte
certification?

3. Would you be willing to discuss this by personal email rather than
through the list (to conserve bandwidth).

Thanks,

-Richard



--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>



--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

Reply via email to