You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by "Einar M. Råberg Rosenvinge" <ei...@tihlde.org> on 2003/02/26 20:41:20 UTC
Installing Thawte test certificate in Tomcat 4.1.18
Hi!
This might be a common problem, but I've checked the list archives and
Thawte's knowledge base, to no avail.
I'm trying to install a Thawte test certificate in Tomcat 4.1.18.
I'm following the instructions at
<URL:http://jakarta.apache.org/tomcat/tomcat-4.1-doc/ssl-howto.html>
Still, I consistently get the errors
C:\EiT>keytool -import -alias tomcat -keystore keystore -trustcacerts
-file testcertificate
Enter keystore password: <the password>
keytool error: java.lang.Exception: Failed to establish chain from reply
The file "testcertificate" is the file I got from the Thawte web service
after providing the CSR. I used all the default values in the web forms.
I imported the Thawte Test CA certificate into my keystore, and that went
very well.
Any ideas?
-Einar
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
Re: Installing Thawte test certificate in Tomcat 4.1.18
Posted by Matt Fury <ma...@yahoo.com>.
I had this issue with InstantSSL... ask for that
specific type. Come to find out for me anyway, the
ALIAS has to be exact for the reply and that's where I
was screwing up.
-Matt
--- Einar M. R�berg Rosenvinge <ei...@tihlde.org>
wrote:
> On Fri, Feb 28, 2003 at 10:59:42 +0100, Einar M.
> R�berg Rosenvinge wrote:
> >
> > I'll send my CSR to Thawte now and see if the
> PKCS#7 reply works.
>
> It worked very well.
>
>
> -Einar
>
>
---------------------------------------------------------------------
> To unsubscribe, e-mail:
> tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail:
> tomcat-user-help@jakarta.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
Re: Installing Thawte test certificate in Tomcat 4.1.18
Posted by "Einar M. Råberg Rosenvinge" <ei...@tihlde.org>.
On Fri, Feb 28, 2003 at 10:59:42 +0100, Einar M. Råberg Rosenvinge wrote:
>
> I'll send my CSR to Thawte now and see if the PKCS#7 reply works.
It worked very well.
-Einar
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
Re: Installing Thawte test certificate in Tomcat 4.1.18
Posted by "Einar M. Råberg Rosenvinge" <ei...@tihlde.org>.
On Wed, Feb 26, 2003 at 20:41:20 +0100, Einar M. Råberg Rosenvinge wrote:
>
> I'm trying to install a Thawte test certificate in Tomcat 4.1.18.
>
> Still, I consistently get the errors
> C:\EiT>keytool -import -alias tomcat -keystore keystore -trustcacerts
> -file testcertificate
> Enter keystore password: <the password>
> keytool error: java.lang.Exception: Failed to establish chain from reply
I got a reply from Thawte. I need the certificate in PKCS#7 format, and
their test system does not provide that. The support technicial will
generate a PKCS#7 format certificate for me, however.
Still, the keytool documentation says that the certificate _can_ be in
_either_ X509 _or_ PKCS#7 format, and that keytool can handle
both. Strange...
I'll send my CSR to Thawte now and see if the PKCS#7 reply works.
-Einar
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org