You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by bob tod <ba...@hotmail.com> on 2003/08/13 12:11:13 UTC

problem importing thawte certificate into keystore

Hi,

I've bought a thawte webserver certificate for tomcat using a csr request 
generated using openssl.

Having obtained the certificate and imported it into the java keystore 
using:

keytool -import -v -alias tomcat -trustcacerts -file myserver.crt -storepass 
changeit


i get the follwoing error with the service:

[INFO] Http11Protocol - -Starting Coyote HTTP/1.1 protocol handler on port 
9443
PoolTcpEndpoint: Handshake failed
javax.net.ssl.SSLHandshakeException: no cipher suites in common
        at com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.a(DashoA6275)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
        at com.sun.net.ssl.internal.ssl.SunJSSE_aw.b(DashoA6275)
        at com.sun.net.ssl.internal.ssl.SunJSSE_aw.a(DashoA6275)
        at com.sun.net.ssl.internal.ssl.SunJSSE_aw.a(DashoA6275)
        at com.sun.net.ssl.internal.ssl.SunJSSE_ax.a(DashoA6275)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
        at com.sun.net.ssl.internal.ssl.SSLSocketImpl.j(DashoA6275)
        at 
com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(DashoA6275)
        at 
org.apache.tomcat.util.net.JSSESocketFactory.handshake(JSSESocketFactory.java:270)
        at 
org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:493)
        at 
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:518)
        at java.lang.Thread.run(Thread.java:536)
ThreadPool: Caught exception executing 
org.apache.tomcat.util.net.TcpWorkerThread@1de891b, terminating thread
java.lang.NullPointerException
        at 
org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:512)
        at 
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:518)
        at java.lang.Thread.run(Thread.java:536)
Stopping service Internal Services
Stopping service Java Web Services Developer Pack
[INFO] http - -JAX-RPC context listener destroyed

Has anyone else had a similar problem?


Cheers

Bob

_________________________________________________________________
It's fast, it's easy and it's free. Get MSN Messenger today! 
http://www.msn.co.uk/messenger


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Re: problem importing thawte certificate into keystore

Posted by Bill Barker <wb...@wilshire.com>.
Easiest is probably to use openssl to create a pkcs12 file, and use that as
your keystore.

I don't feel like answering this question twice in one week, so search the
archives for the "Installing IIS Certificates in Tomcat?" thread.  Your
issues are the same as his.

"bob tod" <ba...@hotmail.com> wrote in message
news:BAY9-F57QgUtc2Ar7Yy0001b40e@hotmail.com...
> Hi,
>
> I've bought a thawte webserver certificate for tomcat using a csr request
> generated using openssl.
>
> Having obtained the certificate and imported it into the java keystore
> using:
>
> keytool -import -v -alias tomcat -trustcacerts -file
myserver.crt -storepass
> changeit
>
>
> i get the follwoing error with the service:
>
> [INFO] Http11Protocol - -Starting Coyote HTTP/1.1 protocol handler on port
> 9443
> PoolTcpEndpoint: Handshake failed
> javax.net.ssl.SSLHandshakeException: no cipher suites in common
>         at com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SunJSSE_aw.b(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SunJSSE_aw.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SunJSSE_aw.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SunJSSE_ax.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.j(DashoA6275)
>         at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(DashoA6275)
>         at
>
org.apache.tomcat.util.net.JSSESocketFactory.handshake(JSSESocketFactory.jav
a:270)
>         at
> org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:493)
>         at
>
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.jav
a:518)
>         at java.lang.Thread.run(Thread.java:536)
> ThreadPool: Caught exception executing
> org.apache.tomcat.util.net.TcpWorkerThread@1de891b, terminating thread
> java.lang.NullPointerException
>         at
> org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:512)
>         at
>
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.jav
a:518)
>         at java.lang.Thread.run(Thread.java:536)
> Stopping service Internal Services
> Stopping service Java Web Services Developer Pack
> [INFO] http - -JAX-RPC context listener destroyed
>
> Has anyone else had a similar problem?
>
>
> Cheers
>
> Bob
>
> _________________________________________________________________
> It's fast, it's easy and it's free. Get MSN Messenger today!
> http://www.msn.co.uk/messenger




Re: problem importing thawte certificate into keystore

Posted by Bill Barker <wb...@wilshire.com>.
Easiest is probably to use openssl to create a pkcs12 file, and use that as
your keystore.

I don't feel like answering this question twice in one week, so search the
archives for the "Installing IIS Certificates in Tomcat?" thread.  Your
issues are the same as his.

"bob tod" <ba...@hotmail.com> wrote in message
news:BAY9-F57QgUtc2Ar7Yy0001b40e@hotmail.com...
> Hi,
>
> I've bought a thawte webserver certificate for tomcat using a csr request
> generated using openssl.
>
> Having obtained the certificate and imported it into the java keystore
> using:
>
> keytool -import -v -alias tomcat -trustcacerts -file
myserver.crt -storepass
> changeit
>
>
> i get the follwoing error with the service:
>
> [INFO] Http11Protocol - -Starting Coyote HTTP/1.1 protocol handler on port
> 9443
> PoolTcpEndpoint: Handshake failed
> javax.net.ssl.SSLHandshakeException: no cipher suites in common
>         at com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SunJSSE_aw.b(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SunJSSE_aw.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SunJSSE_aw.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SunJSSE_ax.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
>         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.j(DashoA6275)
>         at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(DashoA6275)
>         at
>
org.apache.tomcat.util.net.JSSESocketFactory.handshake(JSSESocketFactory.jav
a:270)
>         at
> org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:493)
>         at
>
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.jav
a:518)
>         at java.lang.Thread.run(Thread.java:536)
> ThreadPool: Caught exception executing
> org.apache.tomcat.util.net.TcpWorkerThread@1de891b, terminating thread
> java.lang.NullPointerException
>         at
> org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:512)
>         at
>
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.jav
a:518)
>         at java.lang.Thread.run(Thread.java:536)
> Stopping service Internal Services
> Stopping service Java Web Services Developer Pack
> [INFO] http - -JAX-RPC context listener destroyed
>
> Has anyone else had a similar problem?
>
>
> Cheers
>
> Bob
>
> _________________________________________________________________
> It's fast, it's easy and it's free. Get MSN Messenger today!
> http://www.msn.co.uk/messenger




---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org