On 8/6/20 9:37 AM, Christopher Schultz wrote:
. . .
As a short-term workaround, you can load your stuff into a keystore
like this:

$ openssl pkcs12 -export \
    -inkey /etc/tomcat8/test.foo.net.key \
    -

$ openssl pkcs12 -export \
   -in /etc/tomcat8/test.foo.net.crt \
   -inkey /etc/tomcat8/test.foo.net.key \
   -certfile /etc/tomcat8/test.foo.net.issuer.crt \
   -out /etc/tomcat8/test.foo.net.p12 \
   -chain

Then reconfigure your <Certificate> to use your keystore.

Dear Mr. Schultz:

Thanks.

That could even be a permanent workaround if it can be done non-interactively.

How, I wonder, is it that the PEM files work just fine after the "unwanted update" that bumped Tomcat up from 40 to 57, and pulled in a slightly newer Java 1.8?

--
JHHL

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to