The tag has no usage guidance.

learn more… | top users | synonyms

1
vote
0answers
22 views

How to use your ssl certificate and key from your website with activemq console?

After enforcing strict transport security in a server, it is also forcing https into port 8161 for activemq which of course makes it fail. I followed this instructions to enable https on activemq ...
0
votes
1answer
79 views

P7b file and cer file do I need them both

I'm trying to understand why I need the chain at all (p7b). I have imported certificates previously and I didn't need one. Can I bypass this somehow? Well I am getting an error - keytool error: ...
1
vote
0answers
79 views

sign keytool generated cert/key pairs using easy-rsa openvpn intermediate CA

I am creating root and intermediate CA with easy-rsa using ./build-ca & ./build-inter commands consecutively. Now, I want my root ca as offline and I want my certs/keys signed by intermediate CA. ...
0
votes
0answers
38 views

Tomcat CSR for 2 servers with SAN ssl cert

I have a requirement to install SSL on Tomcat on two different servers. One server for pre-production the other production. I have been told that I must submit a CSR to my CA to get my certs for my ...
3
votes
2answers
7k views

How to generate new, 2048-bit Diffie-Hellman parameters with Java keytool?

We are non-experts trying - unsuccessfully so far - to update our web server (JBoss-5.1.0.GA) settings to meet Diffie-Hellman standards. After running a test on https://weakdh.org/sysadmin.html, we ...
0
votes
2answers
4k views

How to generate .key and .crt file from JKS file for httpd apache server

I have the mycert.jks file only. Now i need to extract and generate .key and .crt file and use it in apache httpd server. SSLCertificateFile /usr/local/apache2/conf/ssl.crt/server.crt ...
0
votes
1answer
26 views

Certificate bound to ip address

I've seen that there are similar questions, but none give a perfect answer to me. I'm trying to set up two machines. One with LAMP and a platform (that works great) and it also handles the user db ...
0
votes
0answers
24 views

ActiveMQ SSL Transport w/ Multiple Certs in Keystore?

We're running ActiveMQ Transport w/ SSL enabled (port 443/HTTPS). We have four domain certs: *.domain.com *.domain-dev.com *.domain-qa.com *.domain-stg.com I've gone through the process of ...
1
vote
1answer
341 views

Can I import an SSL certificate that was created by the CA into my Java keystore?

I'm trying to import a CA-signed certificate into a Java keystore. All the instructions I can find for this tell me to first create a keystore and a signing request (CSR) using the Java keytool, then ...
1
vote
1answer
85 views

Configuring dovecot and postfix ssl setting by jks file

I have CA JKS (Java Keystore) file which the CA bundle was added to it completely and we don't have any problem with java stuffs. Now how may I export/manipulate, keys and required stuffs for setting ...
1
vote
0answers
334 views

SSL error, unable to find valid certification path to requested target

I'm new to ssl so forgive me. I set up a site with ssl and all the online checks (eg. https://ssltools.websecurity.symantec.com/checker/views/certCheck.jsp) show that it is set up correctly and the ...
1
vote
0answers
985 views

Unable to convert JKS keystore to Oracle Wallet using orapki

I have generated jks keystore using keytool and using the jks keystore I have csr. The same csr I have sent to Signing authority. The Signing authority have given the trusted certificates(root,...
0
votes
1answer
629 views

How to install/update/upgrade SSL certificate in Tomcat

I am about to install/update/upgrade a SSL certificate in one of the servers which has the following configuration Sever information: Sever version: Apache Tomcat/6.0.35 OS version: Linux 2.6.18-371....
0
votes
1answer
5k views

Extract key from JKS keystore to use with apache2 and tomcat

I have a keystore in JKS format and I want to use that with apache2. How can I export the key and the certificates (that i already chained) out the JKS in a easy way? I found many answers out there ...
6
votes
1answer
7k views

Unable to generate certificate with Subject Alternate Name using Java 1.7 keytool utility

I'm having an issue generating a keypair with subject alternate name using the Java keytool utility from Java 1.7. I'm attempting to follow the instructions found here. An example of the command I'm ...
2
votes
1answer
1k views

Generate SSL certificate using Keytool

I have a question about SSL certificates. I use Openssl to generate the certificate: I followed this tutorial. My goal is to generate: .crt .key .pem Is possible to obtain the same files using ...
0
votes
1answer
144 views

Generate a certificate with Openssl and import the same certificate using keytool

I have a question about the SSL during the use of CAS in LIferay. I have generate the certificate using Openssl (I flollowed this tutorial) on my CAS Server and now I would to import the certificate ...
0
votes
1answer
274 views

Can I use openssl to generate key/cert for tomcat?

According to http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html#Create_a_local_Certificate_Signing_Request_(CSR) I can use keytool to generate the key and cert for tomcat but can I use openssl? ...
0
votes
1answer
513 views

multiple cert in a file?

I have a file which contains: -----BEGIN CERTIFICATE----- (many lines of 64 bytes) -----END CERTIFICATE----- I use keytool.exe -printcert -file (myfile) it outputs like this Certificate[1]: ...
1
vote
0answers
299 views

Create jks for tomcat using .key ,.ca and .cert file

I have three file sample.cert, sample.CA,sample.key provided by Verisign. I need to create keystore for tomcat. As I searched I cannot use .key file directly to create keystore. The command I used ...
0
votes
2answers
3k views

Keytool ServerAlternateName

I'm trying to get the certificates just right for our Jira/Confluence deployments in house. People access them differently, either from the hostname or the FQDN. I'm using Java 7's keytool so I have ...
0
votes
2answers
2k views

how to install ssl on tomcat 7?

I know this question might sound too easy and I should had read all docs available on internet, the true is that I did, and I had no luck, its kinda confusing for me, I have installed many times this ...
1
vote
1answer
3k views

Installing SSL Thawte Certificates for tomcat from pre-generated Private Key

I have received a Bunch of SSL certificates that i need to install into tomcat servers, and normally this is easy enough. However, these certificates have had their private keys generated elsewhere ...
1
vote
1answer
5k views

SSL connection issue with s_client

I'm trying to configure SSL on two machines (on LAN) from a local CA I created and am hitting an issue when testing with s_client, I can't seem to locate helpful info w/ my google-fu skills. I'm ...
1
vote
1answer
606 views

How to include chain.cer in a keystore file?

I would like to create a keystore file with a certificate and a chain.cer file. # openssl pkcs12 -export -chain -CAfile chain.cer -in example.cer -inkey example.key -out keystore.jks -name tomcat -...
1
vote
2answers
830 views

New Key for expired certificate?

I need to create a new certificate for an internal server. It is self signed. Is there an easy way to just extend the expiration date of the current certificate? If not, can I reuse the current key,...
2
votes
1answer
7k views

Keytool import certificate fails “Public keys in reply and keystore don't match”

I'm importing a SSL certificate to use in Tomcat in my keystore using keytool and it fails with "Public keys in reply and keystore don't match" Problem might be declared by the fact that I created a ...
3
votes
1answer
2k views

Enable SSL with Jetty 8

I received certificates from GoDaddy an I'm trying to enable SSL with Jetty but receive an error 107 SSL protocol error when connecting to https://server.com:8443 I generated the keystore using these ...
1
vote
0answers
1k views

Extract cert and private key from JKS keystore to use it in Apache2 httpd

I tried to find this but no luck. I created a JKS keystore and generated a CSR, then imported the signed cert and intermediate and root CA certs. Used this keystore on Tomcat without problems. Now I ...
7
votes
1answer
10k views

Copy a Java keystore on one machine to another?

I have a keystore on one machine (at /root/.keystore) and I want to move it to another machine at the same location. Currently, the second machine doesn't have a keystore at /root/.keystore, is there ...
3
votes
1answer
2k views

Can't import SSL key using keytool

I have a problem with keytool tool. I have a FishEye/Crucible server which needed to be connected to my Jira server. My Jira server uses SSL. I'm trying to import ssl certificate using the following ...
4
votes
2answers
4k views

Is there anywhere that I can get a valid , signed, SSL cert to the “localhost” domain for testing?

Is there anywhere that I can get a valid , signed, SSL cert to the "localhost" domain for testing? Does anyone anywhere offer a download of something like this that I can use in testing? I know ...
0
votes
2answers
132 views

KEYTOOL equivalent in apache

what is the equivalent command for keytool add in apache/php
0
votes
1answer
633 views

Populating jks file with keys from 509 certificates

Does anyone have detailed, step by step, instructions for extracting encryption keys from 509 certificates, and then storing them inside an encrypted jks file?