I am having trouble setting up a keystore file using Sun's keytool utility. I sent a CSR to Verisign using the IIS wizard and successfully imported the Verisign certificate into IIS. Now I want to generate the keystore file using Sun's keytool utility that comes with the JDK. The keytool complains that the certificate I am trying to import is "not a valid X.509" certificate. Yet when I use keytool -printcert <certfile> on the certificate file, it displays correct values. This entire process worked properly for me when I used a 14-day trial certificate from Verisign. Now that I have a real certificate, I am hitting this problem. Argh.
Anyone else out there using SSL with Tomcat and IIS? I assume that I should be able to use the same certificate in both IIS and the keystore. Any help would be greatly appreciated. Thanks, Keith -------------------------------------------------------------------------------------- SOAP: If it ain't free, don't use it !! Keep net standards free.
