security - How renew ssl certificate on Tomcat? -


following go-daddy documentation :

https://www.godaddy.com/help/tomcat-4x5x6x-renew-a-certificate-5355

the flow:

i've create mydomain.csr , send godaddy , got reply them 3 files ( gd_bundle-g2-g1.crt , gdig2.crt.pem ,59a41eaec32d2046.crt)

i mentioned old cert expired has chain structure , unfortunately go-daddy give me "flat" certificates.

i tried make chain myself :

cat 59a41eaec32d2046.crt gd_bundle-g2-g1.crt gdig2.crt.pem >> mydomain.crt 

after :

sudo keytool -import -alias tomcat -keystore tomcat.keystore -trustcacerts -file mydomain.crt   sudo keytool -import -alias intermed -keystore tomcat.keystore -trustcacerts -file gdig2.crt sudo keytool -import -alias root -keystore tomcat.keystore -trustcacerts -file gd_bundle-g2-g1.crt 

and change server.xml in documentation

i attach pictures of how in opinion should appear enter image description here

but after chain had : enter image description here

when open browser got:

secure connection failed  error occurred during connection talenttribe.me. cannot communicate securely peer: no common encryption algorithm(s). error code: ssl_error_no_cypher_overlap      page trying view cannot shown because authenticity of received data not verified.     please contact website owners inform them of problem.  learn more…  report errors mozilla identify , block malicious sites 

don't understand i'm missing...is chain creation or tomcat issues ??

br,


Comments

Popular posts from this blog

Sort a complex associative array in PHP -

vb.net - How to ignore if a cell is empty nothing -

recursion - Can every recursive algorithm be improved with dynamic programming? -