-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Adriano,
On 6/11/15 7:18 AM, Adriano Matos Meier wrote: > I need update the SSL certificate in Tomcat 6.x. > > First I did: > > 1) Generate keystore keytool -genkeypair -alias repository -keyalg > RSA -keysize 2048 -sigalg SHA256withRSA -keystore > /usr/local/tomcat6/keystore/keystore2015.jks > > 2) Generate CSR keytool -certreq -alias repository -keyalg RSA > -keysize 2048 -sigalg SHA256withRSA -keystore > /usr/local/tomcat6/keystore/keystore2015.jks -file > /usr/local/tomcat6/keystore/request.csr > > after: > > 3) Install intermediate certificate keytool -import -alias > intermed -keystore /usr/local/tomcat6/keystore/keystore2015.jks > -trustcacerts -file intermed.crt > > 4) Install SSL certificate keytool -import -alias server -keystore > /usr/local/tomcat6/keystore/keystore2015.jks -trustcacerts -file > www.domain.com.crt > > I restarted Tomcat and he listen on 8443 normally, but verifying > the fingerprint, it is using the "PrivateKeyEntry" for SSL, not > the "trustedCertEntry". > > I tried to add keyAlias="server" in my server.xml, but I received > this error: > > LifecycleException: service.getName(): "Catalina"; Protocol > handler start failed: java.io.IOException: Alias name server does > not identify a key entry > > The alias of SSL certificate needs to be same of CSR? > > What I did wrong? > > Can anybody help me? > > I appreciate any help! What does "keytool -list" show for that keystore? - -chris -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJVeY6pAAoJEBzwKT+lPKRYELIP/1Ay04R6MQ+ERvM6p/IekeQh iQNIo22Ll+Z34ZxePv4nK/6iPJnwFTSNxSx2fs2V2nG4sJbhqZbjX2r0qRN8BRsv M3Iq3aY0cxbuKpiVlVX5Xkai3E5vPS1U4ye2LDgM/jpOC94MXnTQ7WCktrXjnAnH 9zYe1bcDdUkXV/AoJIfQZQ/XGu4pLLAtGn4YGRoOfeJClzIG7BHgPcMZkoY3wGLM 8CtsZMDvRTwMxMuG65qk4/x5uMVZzLjLCcAc2YflqVHSeZ+/iP9Dee5AcsSvC2FU e3v14JkEJgfx1pZ5S9Y9eQGsJSPc3mi/ecAQuueNtcJBfJG+j4bulpOlE35oJni0 IKKVPem8lBITMtK73LGyjwWvC9yVM4vnjGDTc4BDSOuQ67Yl81Mi4ED/EuwuO7X2 Pjron12Fkpjw+gDEgO2lDyyX0sABiHRbPkYpBxJx9M1OrndXfidqNpwP3tmQQVxF HnQd4wlR9o8tYmAdArU0bbt1DuYcA7gtt2D6r0wDFI3ne5ob98hv0ngXuIw5/o3U z5JRq0zCFtM4fGogezR1LaAP6OyrYTJv8w/o5lf2WvPMBFG7yjesUoxxbFArRviS TwdTxFTDCBFSuktvjEVRGvLIMqHyUi3e6ZYB9GqY/GFdlPw4SnRXdjk/FH8ZBnW6 RrAMfuUwgS7RZkVrWcD4 =Yj+F -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
