aspose file tools*
The moose likes Tomcat and the fly likes Tomcat always shows self signed certificate insted of trusted certificate from cert signing auth Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Products » Tomcat
Bookmark "Tomcat always shows self signed certificate insted of trusted certificate from cert signing auth" Watch "Tomcat always shows self signed certificate insted of trusted certificate from cert signing auth" New topic
Author

Tomcat always shows self signed certificate insted of trusted certificate from cert signing auth

bhargav reddy
Greenhorn

Joined: Feb 11, 2009
Posts: 10
Hi All,
I have a keystore with selfsigned certificate, private key generated and the trusted certificates [root,chain and server].
After enabling SSL port on tomcat6.29, tomcat always picks self signed certificate instead of trusted certificate.

<Connector
port="8443" maxThreads="200"
scheme="https" secure="true" SSLEnabled="true"
keystoreFile="${user.home}/.keystore" keystorePass="changeit"
clientAuth="false" sslProtocol="TLS"/>

If i mention keyalias as trusted keyalias i get the error as shown below and tomcat wont start.

ERROR: java.io.IOException: Alias name keyalias does not identify a key entry

<Connector
port="8443" maxThreads="200"
scheme="https" secure="true" SSLEnabled="true"
keyAlias="keyalias" keystoreFile="${user.home}/.keystore" keystorePass="changeit"
clientAuth="false" sslProtocol="TLS"/>

Any help with this issue would be great.

Thanks,
Bhargav
Tim Holloway
Saloon Keeper

Joined: Jun 25, 2001
Posts: 16250
    
  21

Are you sure you know what value "${user.home}" is set to? If you're not pointing to the proper keystore file, obviously the cert can't be retrieved.

The "keytool -list -keystore keystorefilename" command can be used to list the aliases of the certs. If the one you want isn't in there, that can be a problem, although you should get a message and a startup failure.

If you don't explicitly supply an alias name in your Connector element, the default one that will be used is named "tomcat".


Customer surveys are for companies who didn't pay proper attention to begin with.
sammaiah kyatham
Ranch Hand

Joined: Aug 03, 2003
Posts: 104
Hi,

I'm also facing this issue. the keytool list shows the alias tomcat but tomcat couldn't picking it. I also mentioned the alias name in server.xml as tomcat but tomcat is throwing an error
java.io.IOException: Alias name tomcat does not identify a key entry

Any suggestion would be much appreciated

 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: Tomcat always shows self signed certificate insted of trusted certificate from cert signing auth