Tomcat always shows self signed certificate insted of trusted certificate from cert signing auth

[bhargav reddy]

Hi All,
I have a keystore with selfsigned certificate, private key generated and the trusted certificates [root,chain and server].
After enabling SSL port on tomcat6.29, tomcat always picks self signed certificate instead of trusted certificate.

<Connector
port="8443" maxThreads="200"
scheme="https" secure="true" SSLEnabled="true"
keystoreFile="${user.home}/.keystore" keystorePass="changeit"
clientAuth="false" sslProtocol="TLS"/>

If i mention keyalias as trusted keyalias i get the error as shown below and tomcat wont start.

ERROR: java.io.IOException: Alias name keyalias does not identify a key entry

<Connector
port="8443" maxThreads="200"
scheme="https" secure="true" SSLEnabled="true"
keyAlias="keyalias" keystoreFile="${user.home}/.keystore" keystorePass="changeit"
clientAuth="false" sslProtocol="TLS"/>

Any help with this issue would be great.

Thanks,
Bhargav

[Tim Holloway]

Are you sure you know what value "${user.home}" is set to? If you're not pointing to the proper keystore file, obviously the cert can't be retrieved.

The "keytool -list -keystore keystorefilename" command can be used to list the aliases of the certs. If the one you want isn't in there, that can be a problem, although you should get a message and a startup failure.

If you don't explicitly supply an alias name in your Connector element, the default one that will be used is named "tomcat".

[sam ky]

Hi,

I'm also facing this issue. the keytool list shows the alias tomcat but tomcat couldn't picking it. I also mentioned the alias name in server.xml as tomcat but tomcat is throwing an error
java.io.IOException: Alias name tomcat does not identify a key entry

Any suggestion would be much appreciated