Great piece of code! Now everything is fine with me as well. Thanks to everyone who helped me on this one! I suppose it would be worth adding this piece of code or at least a link to the Tomcat site!!!

Bye,
Werner.

----- Original Message ----- From: "Christoph Lechner" <[EMAIL PROTECTED]>
To: <users@tomcat.apache.org>
Sent: Thursday, August 30, 2007 7:27 PM
Subject: Re: Tomcat keeps breaking/SSL keystore troubles


Morris Jones wrote:
Christoph, I hate these problems, they're always tough to work through,
and keytool doesn't make it any easier.

Did you use keytool to create your key and certificate request?  If you
created the key and request outside of keytool, then keytool won't have
the private key and can't import the certificate.
No, the CSR and the key were created using OpenSSL.

In order to get your private key into the keystore, you need to use a
bit of Java code.  See here:  <http://www.agentbob.info/agentbob/79.html>
It worked for me!!! Thanks a lot for that link, without it I would be
screwed. But IMHO it's a flaw in the documentation of tomcat that they
don't mention how to do this sort of import of the .crt file and the
.key file as well. There are still people out there who don't believe in
the power on the keytool!

There's no need for you to import the CA's root certificate.  It's
already there.
That's right. I just did it, as most of the guides recommended it.

Thanks a lot
- C. Lechner

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to