security - How renew ssl certificate on Tomcat? -
following go-daddy documentation :
https://www.godaddy.com/help/tomcat-4x5x6x-renew-a-certificate-5355
the flow:
i've create mydomain.csr , send godaddy , got reply them 3 files ( gd_bundle-g2-g1.crt , gdig2.crt.pem ,59a41eaec32d2046.crt)
i mentioned old cert expired has chain structure , unfortunately go-daddy give me "flat" certificates.
i tried make chain myself :
cat 59a41eaec32d2046.crt gd_bundle-g2-g1.crt gdig2.crt.pem >> mydomain.crt after :
sudo keytool -import -alias tomcat -keystore tomcat.keystore -trustcacerts -file mydomain.crt sudo keytool -import -alias intermed -keystore tomcat.keystore -trustcacerts -file gdig2.crt sudo keytool -import -alias root -keystore tomcat.keystore -trustcacerts -file gd_bundle-g2-g1.crt and change server.xml in documentation
i attach pictures of how in opinion should appear 
when open browser got:
secure connection failed error occurred during connection talenttribe.me. cannot communicate securely peer: no common encryption algorithm(s). error code: ssl_error_no_cypher_overlap page trying view cannot shown because authenticity of received data not verified. please contact website owners inform them of problem. learn more… report errors mozilla identify , block malicious sites don't understand i'm missing...is chain creation or tomcat issues ??
br,

Comments
Post a Comment