[users@httpd] keytool error: java.lang.Exception: Input not an X.509 certificate

["Peterson, Tommy" <To...@xpandcorp.com>]

I know that this is for the httpd project; but I have a question about Apache Tomcat that I was hoping someone would know about here (as I don't see a tomcat forum).

I am trying to import an SSL cert into my keystore. However, the key and the cert are in one file. According to the docs this is not an issue (you can even concatenate them the docs say). So I just ran the keytool command and I continually get an error message:
"keytool error: java.lang.Exception: Input not an X.509 certificate"

The IT support folks said that this is the cert that was given to them by the hosting company and that it can be installed successfully on Apache.

There is some "junk" ("bag attributes")n the file that I don't' understand. I am used to just seeing "-----BEGIN CERTIFICATE----- "----END CERTIFICATE----- "" ""-----BEGIN RSA PRIVATE KEY----- "-----END RSA PRIVATE KEY----- "

Any suggestions?

Thanks.

________________________________
This message contains Devin Group confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail.
Please notify the sender immediately by e-mail if you have received this e-mail in error and delete this e-mail from your system. E-mail transmissions cannot be guaranteed secure, error-free and information could be intercepted, corrupted, lost, destroyed, arrive late, incomplete, or contain viruses. The sender therefore does not accept liability for errors or omissions in the contents of this message which may arise as result of transmission. If verification is required please request hard-copy version.

Re: [users@httpd] keytool error: java.lang.Exception: Input not an X.509 certificate

[Frank Gingras <fr...@gmail.com>]

On 06/28/2011 03:30 PM, Peterson, Tommy wrote:
> I know that this is for the httpd project; but I have a question about
> Apache Tomcat that I was hoping someone would know about here (as I
> don’t see a tomcat forum).
>
> I am trying to import an SSL cert into my keystore. However, the key and
> the cert are in one file. According to the docs this is not an issue
> (you can even concatenate them the docs say). So I just ran the keytool
> command and I continually get an error message:
> “keytool error: java.lang.Exception: Input not an X.509 certificate”
>
> The IT support folks said that this is the cert that was given to them
> by the hosting company and that it can be installed successfully on Apache.
>
> There is some “junk” (“bag attributes”)n the file that I don’t’
> understand. I am used to just seeing “-----BEGIN CERTIFICATE-----
> “----END CERTIFICATE----- ““ ““-----BEGIN RSA PRIVATE KEY----- “-----END
> RSA PRIVATE KEY----- “
>
> Any suggestions?
>
> Thanks.
>
>
> ------------------------------------------------------------------------
> This message contains Devin Group confidential information and is
> intended only for the individual named. If you are not the named
> addressee you should not disseminate, distribute or copy this e-mail.
> Please notify the sender immediately by e-mail if you have received this
> e-mail in error and delete this e-mail from your system. E-mail
> transmissions cannot be guaranteed secure, error-free and information
> could be intercepted, corrupted, lost, destroyed, arrive late,
> incomplete, or contain viruses. The sender therefore does not accept
> liability for errors or omissions in the contents of this message which
> may arise as result of transmission. If verification is required please
> request hard-copy version.

Tommy,

Read:

http://tomcat.apache.org/lists.html

Frank


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org