You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Neeraj Sood <ne...@ril.com> on 2012/04/19 11:30:07 UTC

my website is not opening after installing CA certificate successfully

C:\Users\neeraj.sood>keytool -list
Enter keystore password:

Keystore type: JKS
Keystore provider: SUN

Your keystore contains 2 entries

rilrootca, 19 Apr, 2012, trustedCertEntry,
Certificate fingerprint (SHA1): 
99:67:6B:C9:B8:90:C1:F0:14:53:36:E3:C7:ED:05:9E:
61:DC:16:A2
rilca, 19 Apr, 2012, trustedCertEntry,
Certificate fingerprint (SHA1): 
99:67:6B:C9:B8:90:C1:F0:14:53:36:E3:C7:ED:05:9E:
61:DC:16:A2


I am able to install certificate successfully. But my site does not open the 
home page. But if I create new certificate using keytool command  :- keytool -
genkey -alias tomcat -keyalg RSA. My home page starts working , but the 
cerficate is not authenticated or validated by the browser.

how to configure certificate in my tomcat server.xml

Need urgent help on this.


Neeraj Sood


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: my website is not opening after installing CA certificate successfully

Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Neeraj,

On 4/19/12 5:30 AM, Neeraj Sood wrote:
> C:\Users\neeraj.sood>keytool -list Enter keystore password:
> 
> Keystore type: JKS Keystore provider: SUN
> 
> Your keystore contains 2 entries
> 
> rilrootca, 19 Apr, 2012, trustedCertEntry, Certificate fingerprint
> (SHA1): 99:67:6B:C9:B8:90:C1:F0:14:53:36:E3:C7:ED:05:9E: 
> 61:DC:16:A2 rilca, 19 Apr, 2012, trustedCertEntry, Certificate
> fingerprint (SHA1): 
> 99:67:6B:C9:B8:90:C1:F0:14:53:36:E3:C7:ED:05:9E: 61:DC:16:A2
> 
> 
> I am able to install certificate successfully. But my site does not
> open the home page. But if I create new certificate using keytool
> command  :- keytool - genkey -alias tomcat -keyalg RSA. My home
> page starts working , but the cerficate is not authenticated or
> validated by the browser.
> 
> how to configure certificate in my tomcat server.xml

Server certificate (to allow SSL) or client certificate (to authenticate)?

> Need urgent help on this.

Need better description of the problem. You might also include the
steps you've already taken. And your configuration.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk+QWG0ACgkQ9CaO5/Lv0PDeZQCfT7gTh++rV2WHq7zWqDi5ysYi
5zYAoL4fAFUvmoanpkw/ZKsoryeBkUEN
=++/8
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: my website is not opening after installing CA certificate successfully

Posted by Victoria Johnson - Kio <vi...@my.bristol.ac.uk>.
Did you use two separate password when going through creating the Keystore
and Certificate?

Try creating the certificate again but when you are promoted for second
password, hit enter so that it is same with the first password that you
used most probably "changeit" and make sure that it is first password that
you set in your connector when you configure server.xml

On Thu, Apr 19, 2012 at 10:30 AM, Neeraj Sood <ne...@ril.com> wrote:

> C:\Users\neeraj.sood>keytool -list
> Enter keystore password:
>
> Keystore type: JKS
> Keystore provider: SUN
>
> Your keystore contains 2 entries
>
> rilrootca, 19 Apr, 2012, trustedCertEntry,
> Certificate fingerprint (SHA1):
> 99:67:6B:C9:B8:90:C1:F0:14:53:36:E3:C7:ED:05:9E:
> 61:DC:16:A2
> rilca, 19 Apr, 2012, trustedCertEntry,
> Certificate fingerprint (SHA1):
> 99:67:6B:C9:B8:90:C1:F0:14:53:36:E3:C7:ED:05:9E:
> 61:DC:16:A2
>
>
> I am able to install certificate successfully. But my site does not open
> the
> home page. But if I create new certificate using keytool command  :-
> keytool -
> genkey -alias tomcat -keyalg RSA. My home page starts working , but the
> cerficate is not authenticated or validated by the browser.
>
> how to configure certificate in my tomcat server.xml
>
> Need urgent help on this.
>
>
> Neeraj Sood
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>


-- 
Victoria Captain Johnson-Kio
BS81EA
+44(0)7936297429
Here's my professional profile
<http://uk.linkedin.com/pub/victoria-captain-johnson-kio/19/9a5/70%20>on
LinkedIn
Personal Impact <http://twitter.com/#%21/VictoriaKio> on Twitter, and some
fun <http://www.facebook.com/kio.victoria> things I do at facebook

Re: my website is not opening after installing CA certificate successfully

Posted by Konstantin Kolinko <kn...@gmail.com>.
2012/4/19 Neeraj Sood <ne...@ril.com>:
> C:\Users\neeraj.sood>keytool -list
> Enter keystore password:
>
> Keystore type: JKS
> Keystore provider: SUN
>
> Your keystore contains 2 entries
>
> rilrootca, 19 Apr, 2012, trustedCertEntry,
> Certificate fingerprint (SHA1):
> 99:67:6B:C9:B8:90:C1:F0:14:53:36:E3:C7:ED:05:9E:
> 61:DC:16:A2
> rilca, 19 Apr, 2012, trustedCertEntry,
> Certificate fingerprint (SHA1):
> 99:67:6B:C9:B8:90:C1:F0:14:53:36:E3:C7:ED:05:9E:
> 61:DC:16:A2
>

The fingerprint is the same, so both are the same one.

You should note that 0 of them has name "tomcat".

> Need better description of the problem. You might also include the
> steps you've already taken. And your configuration.

+1

Best regards,
Konstantin Kolinko

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org