I'm trying to configure a WildFly server running in Docker to use SSL:
- created a private key:
keytool -genkey -alias axcelpk -keyalg RSA -keystore server.keystore -keysize 2048 -validity 1825
- created a CSR:
keytool -certreq -alias axcelPK -keystore server.keystore -file axcel.csr
- converted the
openssl pkcs7 -print_certs -inform der -in axcel-B64-chain.p7b -out axcel-B64-chain.cer
- added the certificate to the keystore:
keytool -import -alias axcelCert -trustcacerts -file axcel-B64-chain.cer -keystore server.keystore
The WildFly configuration in standalone.xml was already done so I didn't touch that (did check it and seems OK).
When requesting a page from the server I get a
Certificate error. When checking the certificate I noticed that I'm getting the SHA256 fingerprint of the private key instead of the fingerprint of the actual certificate. Also the issuer is incorrect and the certification path is basically empty.