Certificate Installation: Java Based Web Servers (Tomcat) using keytool

Installing SSL Certificate Chain (Root, Intermediate(s) and the End Entity)

1. Import Root Certificate

-> keytool -import -trustcacerts -alias AddTrustExternalCARoot -file AddTrustExternalCARoot.crt -keystore domain.keystore

2. Import Intermediate(s)

-> keytool -import -trustcacerts -alias UTNAddTrust -file UTNAddTrustSGCCA.crt -keystore domain.keystore

Note:

Depending on the type of certificate that was purchased, there may be more than one Intermediate certificate in the chain of trust. Please install all intermediates in numberical order until you get to the domain/end entity certificate.

In order to determine which chain of trust you have, please follow the article title Which is Root? Which is Intermediate?

Example: UTNAddTrustSGCCA.crt would become to UTNAddTrustSGCCA.

For more information on

3. Import Entity/Domain certificate

-> keytool -import -trustcacerts -alias mykey -file yourDomainName.crt -keystore domain.keystore

You should you should receive a message: Certificate reply was installed in keystore if successful. It should NOT match the output of Step 1 or 2 above.

Note: If an alias was specified upon creation of the CSR then please use that alias instead of mykey.

4. Restart the Web Server Service.

Note: Tomcat will first need an SSL Connector configured before it can accept secure connections. Please ensure this is set BEFORE the server is restarted.

Certificate Installation: Java Based Web Servers (Tomcat) using keytool

Máte další otázky? Napište nám!