tomcat - Keytool unable to chain imported PCKS12 certificate? -


i have mountain lion server , ssl certificate signed go daddy. have various services using certificate verified using several online ssl checker tools.

i have set jira runs under tomcat need use same certificates imported keystore.

i noticed root go daddy cert wasn't in /library/java/home/lib/security/cacerts, imported trusted cert along intermediate certificate.

in order tomcat use https had import certificate private key. able using keychain access utility export .p12 file. import certificate keystore private key. seemed go - except ssl checker tools reported broken chain of trust. used keytool dump certificates info , did indeed show there 1 certificate in chain rather 3 expected.

no method of importing certificate appears resolve chain of trust.

what missing???

there difference between having key incorporate whole cert-chain, or having key plus 1 or more certificates in keystore.

you may use openssl create key incorporates whole cert-chain, e.g.:

openssl pkcs12 -in <key in .pem-format> -export -out tmp-keystore.p12 -certfile <one file several cert-blocks> 

Comments

Popular posts from this blog

ios - iPhone/iPad different view orientations in different views , and apple approval process -

java Extracting Zip file -

C# WinForm - loading screen -