Welcome
Login  |  Register
Friday, July 04, 2008
  Search
You are here:Knowledge Base
 
More Information
More Information
More Information
More Information
 
 

 Please Register or login to view our private forums, it is free!!
Forums > Knowledge Base (DNN MODULE FIXES and HOW TO's > Installing your SSL Certificate on Tomcat
Subject: Installing your SSL Certificate on Tomcat
Prev Next
You are not authorized to post a reply.

Author Messages
hostUser is Offline
Posts:90
07/11/2007 10:10 AM  
Create the Private Key
----------------------
keytool -genkey -alias tomcat -keyalg RSA -keystore keystorefile.kdb
Enter keystore password: Standard Default Used: “Changeit”
Re-enter new password: Standard Default Used: “Changeit”

Create the CSR file
-------------------
keytool -certreq -keystore keystorefile.kdb -alias tomcat -file certreq.txt
Enter keystore password:

A file will now be created in the bin folder called certreq.txt, copy the whole contents of this file and submit it at the CA website in order to retreive the certificate.

X.509 error
How to install the cert. double click it. Then click install cert. Once that is done open internet option > content tab. When you did the import you specified were the cert would be put. Find the cert. then export it. Now I can run the keytool -import -trustcacerts -file rootcertfile.cer -keystore keystorefile.kdb and I no longer get that error.

BEFORE INSTALLING THE CERT YOU MUST INSTALL THE ROOT CERTS
1.Goto http://www.geotrust.com/resources/root_certificates/index.asp
2.Download - Equifax Secure Global eBusiness CA-1 (Base-64 encoded X.509)

Importing the Root Certificate
------------------------------
keytool -import -trustcacerts -file rootcertfile.cer -keystore keystorefile.kdb

You will have to set specific paths
Example: keytool -import -trustcacerts -file c:\rootcertfile.cer -keystore c:\keystorefile.kdb

You will be prompted for the password you used when created the CSR request. Standard Default Used: “Changeit”

Importing the SSL Certificate
-----------------------------
keytool -import -alias tomcat -file sslcertfile.cer -keystore keystorefile.kdb

If successful it will display: 'Certificate reply was installed in keystore'

Edit the SERVER.XML file
------------------------

open server.xml in notepad

Add the following lines:

keystoreFile="%JAVA_HOME%\bin\keystorefile.kdb">
keystorePass="password"/>
-----------------------------
Good information Reissue process:
After generating the CSR from the server use the below URL to start the update process:
https://products.geotrust.com/geocenter/reissuance/reissue.do
Fill in the three fields to login. On the next screen click on 'redeem' and then click on submit and continue.
You will recieve an email which will include a web link to update the current CSR, click on this link and you will be directed to the page where you will paste the CSR.
Shortly afterwards you will recieve an email to approve the reissue then a new certificate will be sent out which you can now use to install on the server.
You are not authorized to post a reply.
Forums > Knowledge Base (DNN MODULE FIXES and HOW TO's > Installing your SSL Certificate on Tomcat > Installing your SSL Certificate on Tomcat


ActiveForums 3.7
Privacy Statement  |  Terms Of Use  
Copyright 2006-7 Vigilant Support