Hi all,

I finally managed to install the certificate.  In case someone else gets
into the same situation, here's the solution:

1. 
I installed a test root certificate from Thawte into
$JAVA_HOME/jre/lib/security/cacerts.

2. 
When importing the certificate for my website, I had to use the same alias
as the key and use the option "-trustcacerts".

When I tried this before I always got the error message "Keytool-Fehler:
java.lang.Exception: Kette konnte nicht aus Antwort entnommen werden."
(Sorry, I have a German Java installation, this means something like
"Couldn't find chain in response").


Sven


> -----Urspr�ngliche Nachricht-----
> Von: Sven Woltmann 
> Gesendet: Freitag, 7. Juni 2002 17:49
> An: '[EMAIL PROTECTED]'
> Betreff: Installation of a signed SSL certificate
> 
> 
> Hi,
> 
> I have a problem installing an SSL certificate.  
> I am using Tomcat 4.0.4-b3 standalone on Linux.
> 
> First, I created a key pair with "keytool -genkey..." and 
> configured the "server.xml".  I am now able to view my 
> webpages with https://myserver
> 
> Of course, my browser tells me that the certificate is not 
> trusted, so I created a "certificate signing request" and 
> created a test certificate on www.thawte.com.
> 
> I installed the certificate signing request using "keytool 
> -import..." into the same keystore where I created the key.  
> The keystore has 2 entries now, a "keyEntry" and a "trustedCertEntry".
> 
> I restarted Tomcat and tried https://myserver again.  But it 
> still displays the untrusted self-signed certificate, not the 
> one I got from Thawte.
> 
> Can anyone tell me how to configure Tomcat to use the signed 
> certificate instead?
> 
> Thanks,
> Sven
> 

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to