Apparently PKCS7 can not work because it doens't convert the private key and doesn't contain the private key.
But i think here we have a wrong information in the WIKI in the technical startup document. So then we have to use PKCS12. Regards, Heidi 2011/3/16 Info Olagos <info.ola...@gmail.com> > Hello, > > Thanks for the info. > > At the end i have a near working solution for the certificates. > > I learned that the keytool doesn't accept anymore .p7b or PKCS7 > certificates. > So i converted with openssl the PKCS7 certificate back to X.509 certificate > and that one i imported into the keystore with the keytool. > > So far that worked. > Now the parameters in the ofbiz-container.xml for HTTPS are configured > also. > > But on the level of SSL i have now still a problem. It doesn't recognize > the ciphers .... > > Will be solved and followed up ...... > > Thanks for knowing that PKCS12 is also ok. > > At the end it was a thorough study of certificates before you can logically > handle them ................ > > Regards, > Heidi > > 2011/3/16 Jacques Le Roux <jacques.le.r...@les7arts.com> > >> Yes from experience I confirm, >> >> PKCS12 is the way >> >> Jacques >> >> >> Richard Siddall wrote: >> >>> Info Olagos wrote: >>> >>>> Hello, >>>> >>>> Has anyone already imported a PKCS7 certificate into the java keystore >>>> for >>>> use with embedded Tomcat Ofbiz? >>>> >>>> Regards, >>>> Heidi >>>> >>>> >>> I think I had to convert one to PKCS12. IIRC, Java6 lets you use PKCS12 >>> as a key store with key tool. I read that Tomcat can use PKCS12 >>> directly, but I converted mine to the Java keystore format. >>> >>> Regards, >>> >>> Richard Siddall >>> >> >> > > > -- > Olagos bvba > http://www.olagos.eu <http://www.olagos.eu/> > http://www.olagos.com > http://www.olagos.be > http://www.olagos.nl > Olagos team > Heesterbos 5 > 2570 Duffel > Belgium > > > > -- Olagos bvba http://www.olagos.eu <http://www.olagos.eu/> http://www.olagos.com http://www.olagos.be http://www.olagos.nl Olagos team Heesterbos 5 2570 Duffel Belgium
