RE: Tomcat 8.5.16 - can't use Java keystore with multiple entries having different keypass for each entry?

[Frank Taffelt <Fr...@interface-projects.de>]

Hi Christopher,

> > # create 2 entries with different keypass for each entry keytool
> > -genkeypair -alias tomcat1 -storepass storepass  -keystore
> > different.jks  -keyalg RSA -keypass tomcat1  -ext san=dns:tomcat1
> > -dname CN=tomcat1 keytool -genkeypair -alias tomcat2 -storepass
> > storepass  -keystore different.jks  -keyalg RSA -keypass tomcat2 -ext
> > san=dns:tomcat2 -dname CN=tomcat2
> 
> What is the password for the keystore itself?

my password for the keystore has the value storepass.

> 
> > setup a SSL Connector to use that keystore:
> >
> > <Connector port="443" URIEncoding="UTF-8" scheme="https"
> > secure="true" SSLEnabled="true"
> >>
> >  <SSLHostConfig
> > ciphers="HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!kRSA"
> > protocols="all">
> >
> > <!-- doesn't work, use keypass for alias tomcat2 --> <Certificate
> > certificateKeystoreFile="different.jks"
> > certificateKeystorePassword="storepass"
> > certificateKeyAlias="tomcat2" certificateKeystoreType="JKS"
> > certificateKeyPassword="tomcat2" type="RSA" />
> 
> ... and why don't you have the keystore password set, here? Or did you just
> use "changeit"?

in the attribute certificateKeystorePassword i'm using the value storepass. IMHO the password is given.

Frank