Java Mailing List Archive

http://www.junlu.com/

Home » Home (12/2007) » Apache Tomcat »

Re: Tomcat 3.3 and SSL Certificate Key with a Passphrase

Bill Barker

2007-07-22

Replies:


"Inash Zubair" <inash@(protected)
news:295e9b8d0707212003u15d2700em94b7b41611922a7d@(protected)...
> Hi.
>
> I've been trying to tackle a problem with adding an SSL certificate to
> the keystore using the keytool. We have purchased a Verisign SSL
> Secure Site Pro certificate which was generated with a key using a
> passphrase. It was generated using OpenSSL. I have been able to make
> it work with Apache.
>
> However, we have a web application that needs to be secured running
> Tomcat 3.3. When I add the intermediate certificate and our private
> certificate and restart Tomcat, and try to connect to it using the
> browser, it displays an error stating that the security protocol is
> not recognized.
>
> I've tried several alternative methods of adding the certificate to
> the keystore but haven't been able to configure tomcat to use the
> passphrase. I've seen it is possible with the later versions using a
> configuration directive SSLPassphrase in the server.xml configuration
> file.
>
> Hope I get a solution for it to work with Tomcat 3.3. Thanks and Cheers!
>

For the most part, the solution is much the same for Tomcat 3.3 as it is for
the later versions. Usually the easiest is to use OpenSSL to create a
PCKS12 file, and use that for the keystoreFile. Another possible
alternative is to do something like http://www.comu.de/docs/tomcat_ssl.htm.

>
> --
> - Inash
>
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@(protected)
> To unsubscribe, e-mail: users-unsubscribe@(protected)
> For additional commands, e-mail: users-help@(protected)
>
>




---------------------------------------------------------------------
To start a new topic, e-mail: users@(protected)
To unsubscribe, e-mail: users-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)

©2008 junlu.com - Jax Systems, LLC, U.S.A.