SSL Root Cert install

[Matthew Smith <ma...@gmail.com>]

I'm running Apache Tomcat 7 on Windows Server 2008 R2 with Java jdk
1.8.0_25. I was able to use the keytool.exe command with the -genkey switch
to create a keystore. I then used keytool.exe to create a CSR which I
submitted to an issuer and received a certificate. I have to use
keytool.exe to import the Root and Chain certificates first. I can't get
the import of the Root certificate to work. I get the error message

"keytool error: java.io.FileNotFoundException:
C:\Users\Administrator\root.cer (The system cannot find the file specified)"

Searches I do for this error seem to only net me results when people run
keytool.exe and it can't find their .keystore. Keytool.exe finds my
keystore just fine, it can't find the actual root.cer file though. I've
tried putting that cert file in the C:\Users\Administrator folder with the
.keystore file, I've put it in the Java jdk folders, I've put it in the
tomcat7 folder, and keytool.exe still can't find it. I've download the
Microsoft Process Monitor util and setup a filter to watch for any
commands/errors related to my root.cer file, and the keytool.exe process
can access the root.cer file, even though the import fails. I've modified
the -file command to use the current directory, I've passed it the full
path to the root.cer file in multiple locations, nothing is working, and
I've run out of ideas for things to try. Has anyone else seen this problem
before?

Re: SSL Root Cert install

[Igor Cicimov <ic...@gmail.com>]

On 06/11/2014 8:46 AM, "Matthew Smith" <ma...@gmail.com> wrote:
>
> I'm running Apache Tomcat 7 on Windows Server 2008 R2 with Java jdk
> 1.8.0_25. I was able to use the keytool.exe command with the -genkey
switch
> to create a keystore. I then used keytool.exe to create a CSR which I
> submitted to an issuer and received a certificate. I have to use
> keytool.exe to import the Root and Chain certificates first. I can't get
> the import of the Root certificate to work. I get the error message
>
> "keytool error: java.io.FileNotFoundException:
> C:\Users\Administrator\root.cer (The system cannot find the file
specified)"
>
> Searches I do for this error seem to only net me results when people run
> keytool.exe and it can't find their .keystore. Keytool.exe finds my
> keystore just fine, it can't find the actual root.cer file though. I've
> tried putting that cert file in the C:\Users\Administrator folder with the
> .keystore file, I've put it in the Java jdk folders, I've put it in the
> tomcat7 folder, and keytool.exe still can't find it. I've download the
> Microsoft Process Monitor util and setup a filter to watch for any
> commands/errors related to my root.cer file, and the keytool.exe process
> can access the root.cer file, even though the import fails. I've modified
> the -file command to use the current directory, I've passed it the full
> path to the root.cer file in multiple locations, nothing is working, and
> I've run out of ideas for things to try. Has anyone else seen this problem
> before?
What are the file permissions on the certificate? Is it readable to the
user you are running the keytool with?

Re: SSL Root Cert install

[Christopher Schultz <ch...@christopherschultz.net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Matthew,

On 11/5/14 4:44 PM, Matthew Smith wrote:
> I'm running Apache Tomcat 7 on Windows Server 2008 R2 with Java
> jdk 1.8.0_25. I was able to use the keytool.exe command with the
> -genkey switch to create a keystore. I then used keytool.exe to
> create a CSR which I submitted to an issuer and received a
> certificate. I have to use keytool.exe to import the Root and Chain
> certificates first. I can't get the import of the Root certificate
> to work. I get the error message
> 
> "keytool error: java.io.FileNotFoundException: 
> C:\Users\Administrator\root.cer (The system cannot find the file
> specified)"
> 
> Searches I do for this error seem to only net me results when
> people run keytool.exe and it can't find their .keystore.
> Keytool.exe finds my keystore just fine, it can't find the actual
> root.cer file though. I've tried putting that cert file in the
> C:\Users\Administrator folder with the .keystore file, I've put it
> in the Java jdk folders, I've put it in the tomcat7 folder, and
> keytool.exe still can't find it. I've download the Microsoft
> Process Monitor util and setup a filter to watch for any 
> commands/errors related to my root.cer file, and the keytool.exe
> process can access the root.cer file, even though the import fails.
> I've modified the -file command to use the current directory, I've
> passed it the full path to the root.cer file in multiple locations,
> nothing is working, and I've run out of ideas for things to try.
> Has anyone else seen this problem before?

What exact commands are you running, and where are your files?

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
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=R06R
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org