Re: Issues with Tomcat 6.0 & Renewing SSL cert using keytool

2011-02-15 Thread Mark Thomas
On 14/02/2011 19:46, Sean Killeen wrote: > It doesn't -- it tells me that a certificate already exists with that alias, > and the import fails. Hmm. Did you re-use the same private key for this updated certificate? If that is the case then I think you can fix this with some java code but it looks

Re: Issues with Tomcat 6.0 & Renewing SSL cert using keytool

2011-02-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sean, On 2/15/2011 7:37 AM, Sean Killeen wrote: > leaving the old intermediate CA & old certificate, I added the new > intermediate CAs and the new certificate with an alias of "tomcat2". I added > 'keyAlias="tomcat2"' to my connector to specify the n

Re: Issues with Tomcat 6.0 & Renewing SSL cert using keytool

2011-02-15 Thread Sean Killeen
Hi Sal, Thanks for the response. I believe there was a bug or issue which caused us to use TLSv1 instead of just "TLS" for the setting. At any rate, this setting has not been an issue in the past, and I can verify that it strictly enforces TLS (which is our requirement -- we don't want it to be a

Re: Issues with Tomcat 6.0 & Renewing SSL cert using keytool

2011-02-14 Thread Crypto Sal
Hi Sean, Have you tried to specify just "TLS" or "SSL" for the sslProtocol? You presently have this set at "TLSv1", which I do not believe is valid. http://tomcat.apache.org/tomcat-6.0-doc/config/http.html --Sal On 02/14/2011 02:46 PM, Sean Killeen wrote: It doesn't -- it tells me that a c

Re: Issues with Tomcat 6.0 & Renewing SSL cert using keytool

2011-02-14 Thread Sean Killeen
It doesn't -- it tells me that a certificate already exists with that alias, and the import fails. -- Sean On Mon, Feb 14, 2011 at 12:54 PM, Mark Thomas wrote: > On 14/02/2011 14:03, Sean Killeen wrote: > > The next step seems to throw tomcat off. I believe I need to replace the > > "tomcat" a

Re: Issues with Tomcat 6.0 & Renewing SSL cert using keytool

2011-02-14 Thread Mark Thomas
On 14/02/2011 14:03, Sean Killeen wrote: > The next step seems to throw tomcat off. I believe I need to replace the > "tomcat" alias certificate. Barring a replace function in keytool (which I > don't think exists, though I could be wrong), I think this means I have to > delete the old "tomcat" cer

Issues with Tomcat 6.0 & Renewing SSL cert using keytool

2011-02-14 Thread Sean Killeen
Hi all, I'm hoping someone has run into this problem before. I'm using VeriSign certs and have imported a certificate correctly before using keytool. However, the certificate we were using expired, and we obtained a replacement. Importing the replacement appears to be more difficult. Verisign's