Re: SSL certificates

2014-01-17 Thread Miten Mehta
, Jan 17, 2014 at 7:30 PM, Ognjen Blagojevic < ognjen.d.blagoje...@gmail.com> wrote: > Miten, > > > On 17.1.2014 14:33, Miten Mehta wrote: > >> The catalina.out complaines with SSL handshake stating No Name matching >> mhoodws.ril.local found. >> > >

Re: SSL certificates

2014-01-17 Thread Miten Mehta
If I remove internal /etc/hosts lookup entry should it resolve or you mean CA just dropped subjectAltName even though I included. - miten On Jan 17, 2014 7:31 PM, "Ognjen Blagojevic" wrote: > Miten, > > On 17.1.2014 14:33, Miten Mehta wrote: > >> The catalina.out c

Re: SSL certificates

2014-01-17 Thread Miten Mehta
What's the alternative to using subjectAltName? I thought it was flexible to make certificate portable across our development environments. Should I use IP (internal instead)? - Miten. On Jan 17, 2014 7:31 PM, "Ognjen Blagojevic" wrote: > Miten, > > On 17.1.2014

Re: SSL certificates

2014-01-17 Thread Miten Mehta
to do dns entry like I did ? Regards, Miten. On Thu, Jan 16, 2014 at 10:37 PM, James H. H. Lampert < jam...@touchtonecorp.com> wrote: > On 1/16/14 9:01 AM, Miten Mehta wrote: > >> Hi, >> >> I am understanding SSL for tomcat using >> http://tomcat.apache.org/to

Re: SSL certificates

2014-01-16 Thread Miten Mehta
Jan 16, 2014 at 10:31 PM, Miten Mehta wrote: > Hi, > > I am understanding SSL for tomcat using > http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html. > 1)I create jks using self signed certificate using keytool. > 2) I generate CSR from that keystore/certificate. > 3) I

SSL certificates

2014-01-16 Thread Miten Mehta
Hi, I am understanding SSL for tomcat using http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html. 1)I create jks using self signed certificate using keytool. 2) I generate CSR from that keystore/certificate. 3) I get it signed by CA who gives me root certificate and signed certificate. 4) I need