You should be able to create a PKCS12 keystore using OpenSSL with the
private key and the certificate you have.  See if the following thread
helps.

http://www.mail-archive.com/[EMAIL PROTECTED]/msg08816.html

++Vamsi

On Wed, Mar 12, 2008 at 6:59 PM, Some user <[EMAIL PROTECTED]> wrote:

>
> Dear Tomcat wizards,
>
> I need a signed multi domain certificate for Tomcat (x.example.com,
> y.example.com, z.example.com). I do have a signed certificate but can't
> import this in the keystore with the keytool command as I generated the
> request with OpenSSL and now keytool complains that the keys don't match.
>
> Fine, so I need to generate a CSR request with keytool first. When I run
> the
> "keytool -genkey -alias..." command I get these questions where I need to
> enter my first and last name:
>
> What is your first and last name?
>  [Unknown]: x.example.com
>
> This is where I enter my fully qualified server name for the certificate.
> Problem is I can't enter MULTIPLE DOMAINS. I need more subdomains here as
> my
> server listens to x.example.com, y.example.com and z.example.com. A
> wildcard
> certificate is not an option as the signing authority doesn't want to sign
> wildcard certificates.
>
> Does anyone know how to generate a multi domain request with keytool? I
> know
> how to do this with openssl but I need a keytool one...
>
> Thanks!
> --
> View this message in context:
> http://www.nabble.com/Multi-domain-certificate-with-keytool-tp16002309p16002309.html
> Sent from the Tomcat - User mailing list archive at Nabble.com.
>
>
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

Reply via email to