Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I am installing a SSL cert in my Tomcat server, but it fails to find the key entry in my keystore file.

If I don't specify keyAlias="mykey" it shows me the following error message:

javax.net.ssl.SSLException: No available certificate or key corresponds to the SSL cipher suites which are enabled.

As I saw on Tomcat Documentation http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html#Troubleshooting it tells me to specify the keyAlias.

However, when I do it, I get the following error message:

java.io.IOException: Alias name mykey does not identify a key entry

And if I keytool -list -keystore .keystore -v, I get three key entries, two from the cert company and the last one:

Alias name: mykey
Creation date: Dec 17, 2011
Entry type: trustedCertEntry

That is, the key entry is there, but Tomcat can't find it. The keystoreFile is corrected set to the keystore file.

What can it be?

share|improve this question
    
Try perhaps to specify the absolute path to your keystore file in the keystoreFile connector attribute, if it's not already the case. –  Bruno Dec 17 '11 at 17:21
    
I have tried both absolute and relative path already without success. –  João Daniel Dec 18 '11 at 6:30
1  
How did you import the key? It looks like mykey is just a certificate, not a certificate + private key, which is what you'd need. –  Bruno Dec 18 '11 at 17:03
    
I followed the instructions from the company who sold the certificate. I received a zip file with three certificate files: a root file, a intermediate file and my domain certificate. Then I added those three certificates to the keystore file. I'll try those steps again. –  João Daniel Dec 18 '11 at 18:53
    
@Bruno it seems you're right. mykey shouldn't be a trustedCertEntry. Thanks! –  João Daniel Dec 18 '11 at 19:04

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.