up vote 0 down vote favorite
share [g+] share [fb]

I am installing a SSL cert in my Tomcat server, but it fails to find the key entry in my keystore file.

If I don't specify keyAlias="mykey" it shows me the following error message:

javax.net.ssl.SSLException: No available certificate or key corresponds to the SSL cipher suites which are enabled.

As I saw on Tomcat Documentation http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html#Troubleshooting it tells me to specify the keyAlias.

However, when I do it, I get the following error message:

java.io.IOException: Alias name mykey does not identify a key entry

And if I keytool -list -keystore .keystore -v, I get three key entries, two from the cert company and the last one:

Alias name: mykey
Creation date: Dec 17, 2011
Entry type: trustedCertEntry

That is, the key entry is there, but Tomcat can't find it. The keystoreFile is corrected set to the keystore file.

What can it be?

link|improve this question
Try perhaps to specify the absolute path to your keystore file in the keystoreFile connector attribute, if it's not already the case. – Bruno Dec 17 '11 at 17:21
I have tried both absolute and relative path already without success. – João Daniel Dec 18 '11 at 6:30
1  
How did you import the key? It looks like mykey is just a certificate, not a certificate + private key, which is what you'd need. – Bruno Dec 18 '11 at 17:03
I followed the instructions from the company who sold the certificate. I received a zip file with three certificate files: a root file, a intermediate file and my domain certificate. Then I added those three certificates to the keystore file. I'll try those steps again. – João Daniel Dec 18 '11 at 18:53
@Bruno it seems you're right. mykey shouldn't be a trustedCertEntry. Thanks! – João Daniel Dec 18 '11 at 19:04
show 1 more comment
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown
discard

Browse other questions tagged or ask your own question.