I am trying to install a geotrust chain cert in tomcat. The problem is, the cert was created using a key generated using openssl, and so it is not the same key as that in the existing keystore. I have not been able to locate info that can help me in one potential solution I thought of, which is to generate a new keystore using this existing key.
I am installing this in an appliance that runs a modified tomcat to power the web-gui. There is an included .jar script that can allow me to insert this key/cert pair into the keystore, but there is no way to pass the equivalent of keytool's -trustcacerts flag to trust a cert. This, it would seem, is causing browsers to not see the association between the final cert, and the root.
I am running keytool in the standard way I've done it for other (thawte and netsol certs) with success - it seems as though certs from at least those two providers can work without adding the -trustcacerts flag to the final cert, but the same is not true for geotrust. As usual, geotrust's support has been a total let-down.
Does anyone have any tips on how I can get this cert to work properly on tomcat, or if there is a way to create a new keystore using an existing key?
Again, I haven't included commands because they are in-part different due to various customizations, and I have validated that these same commands have worked for other cert installs (same cert-types too) in the past.