On 8/6/20 9:37 AM, Christopher Schultz wrote:
. . .
As a short-term workaround, you can load your stuff into a keystore
like this:
$ openssl pkcs12 -export \
-inkey /etc/tomcat8/test.foo.net.key \
-
$ openssl pkcs12 -export \
-in /etc/tomcat8/test.foo.net.crt \
-inkey /etc/tomcat8/test.foo.net.key \
-certfile /etc/tomcat8/test.foo.net.issuer.crt \
-out /etc/tomcat8/test.foo.net.p12 \
-chain
Then reconfigure your <Certificate> to use your keystore.
Dear Mr. Schultz:
Thanks.
That could even be a permanent workaround if it can be done
non-interactively.
How, I wonder, is it that the PEM files work just fine after the
"unwanted update" that bumped Tomcat up from 40 to 57, and pulled in a
slightly newer Java 1.8?
--
JHHL
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org