[EMAIL PROTECTED] wrote:
jfclere 2002/12/16 09:39:36

Modified: webapps/tomcat-docs ssl-howto.xml
Log:
Add the format of the different certificates.
Revision Changes Path
1.12 +4 -3 jakarta-tomcat-4.0/webapps/tomcat-docs/ssl-howto.xml
Index: ssl-howto.xml
===================================================================
RCS file: /home/cvs/jakarta-tomcat-4.0/webapps/tomcat-docs/ssl-howto.xml,v
retrieving revision 1.11
retrieving revision 1.12
diff -u -r1.11 -r1.12
--- ssl-howto.xml 8 Feb 2002 17:51:05 -0000 1.11
+++ ssl-howto.xml 16 Dec 2002 17:39:35 -0000 1.12
@@ -384,8 +384,9 @@
-keystore &lt;your_keystore_filename&gt;</source>
</li>
</ul>
-<p>Now you have a file called <code>certreq.csr</code> that you can submit to the Certificate Authority (look at the
-documenation of the Certificate Authority website on how to do this). In return you get a Certificate.</p>
+<p>Now you have a file called <code>certreq.csr</code>. The file is encoded in PEM format.
+You can submit it to the Certificate Authority (look at the
+documentation of the Certificate Authority website on how to do this). In return you get a Certificate.</p>
</subsection>
<subsection name="Importing the Certificate">
@@ -403,7 +404,7 @@
<source>keytool -import -alias root -keystore &lt;your_keystore_filename&gt; \
-trustcacerts -file &lt;filename_of_the_chain_certificate&gt;</source>
</li>
-<li>And finally import your new Certificate
+<li>And finally import your new Certificate (It must be in X509 format):
What about something like?
"It must be only the X509 certificate in format PEM or format DER"

The "only" is for example for CA.pl (openssl) that produces a file that contains some human readable data and the X509 certificate in PEM. The "human readable" data are not accepted by keytool.

<source>keytool -import -alias tomcat -keystore &lt;your_keystore_filename&gt; \
-trustcacerts -file &lt;your_certificate_filename&gt;</source>
</li>

--
To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>





--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to