Re: Deploying .ca-bundle file & .crt file as SSL certificates

2014-11-27 Thread Kernel freak
On Wed, Nov 26, 2014 at 7:21 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > To whom it may concern, > > On 11/26/14 12:00 PM, Kernel freak wrote: > > On Wed, Nov 26, 2014 at 5:33 PM, Christopher Schultz < > > ch...@christopher

Re: Deploying .ca-bundle file & .crt file as SSL certificates

2014-11-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 To whom it may concern, On 11/26/14 12:00 PM, Kernel freak wrote: > On Wed, Nov 26, 2014 at 5:33 PM, Christopher Schultz < > ch...@christopherschultz.net> wrote: > > To whom it may concern, > > On 11/26/14 9:03 AM, Kernel freak wrote: After

Re: Deploying .ca-bundle file & .crt file as SSL certificates

2014-11-26 Thread Kernel freak
On Wed, Nov 26, 2014 at 5:33 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > To whom it may concern, > > On 11/26/14 9:03 AM, Kernel freak wrote: > > After arguing with the admins for all this time, I finally have the > > few f

Re: Deploying .ca-bundle file & .crt file as SSL certificates

2014-11-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 To whom it may concern, On 11/26/14 9:03 AM, Kernel freak wrote: > After arguing with the admins for all this time, I finally have the > few files ready. I have the following files : > > keystore.p12 That should contain your key. Can you confirm t

Re: Deploying .ca-bundle file & .crt file as SSL certificates

2014-11-26 Thread Kernel freak
Hello, After arguing with the admins for all this time, I finally have the few files ready. I have the following files : keystore.p12, server.crt, ssl-cert-snakeoil.key, domainname.com.ca-bundle, domainname.com.crt domainname.com.csr domainname.com.key, vsftpd.pem. I did the following as Christo

Re: Deploying .ca-bundle file & .crt file as SSL certificates

2014-11-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 To whom it may concern, On 11/25/14 3:32 AM, Kernel freak wrote: > I don't have the server.key and server.crt. I have root access to > server, I can generate my own if necessary. I only have .crt and > .ca-bundle file. Can you tell me what to do. Th

Re: Deploying .ca-bundle file & .crt file as SSL certificates

2014-11-25 Thread Kernel freak
Hello Christopher, I don't have the server.key and server.crt. I have root access to server, I can generate my own if necessary. I only have .crt and .ca-bundle file. Can you tell me what to do. Thank you very much for your help. On Mon, Nov 24, 2014 at 7:48 PM, Christopher Schultz < ch...@christ

Re: Deploying .ca-bundle file & .crt file as SSL certificates

2014-11-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Niranjan, On 11/24/14 10:51 AM, Niranjan Babu Bommu wrote: > I think you have create a keystore from the cert, please follow > these instruction and ket me know. > > Create store with temporary key inside: > > keytool -genkey -alias -keystore you

Re: Deploying .ca-bundle file & .crt file as SSL certificates

2014-11-24 Thread Niranjan Babu Bommu
it works for me with this conf. On Mon, Nov 24, 2014 at 11:27 AM, Niranjan Babu Bommu < niranjan.bo...@gmail.com> wrote: > Are you able to see the 8443 port listening? > > nc -z 8443 > > On Mon, Nov 24, 2014 at 11:25 AM, Kernel freak > wrote: > >> I have added the certificate. I modified th

Re: Deploying .ca-bundle file & .crt file as SSL certificates

2014-11-24 Thread Niranjan Babu Bommu
Are you able to see the 8443 port listening? nc -z 8443 On Mon, Nov 24, 2014 at 11:25 AM, Kernel freak wrote: > I have added the certificate. I modified the server.xml code to add the > following lines : > maxThreads="150" >scheme="https" secure="true" clientAuth="false" > ss

Re: Deploying .ca-bundle file & .crt file as SSL certificates

2014-11-24 Thread Kernel freak
I have added the certificate. I modified the server.xml code to add the following lines : Now when I open the application, it redirects to https, but it says unable to connect, your connection to this website maynotbe encrypted. What am I doing wrong? On Mon, Nov 24, 2014 at 5:20 PM, Niranjan

Re: Deploying .ca-bundle file & .crt file as SSL certificates

2014-11-24 Thread Niranjan Babu Bommu
Sorry, I did not notice that. - *Import a root or intermediate CA certificate to an existing Java keystore* keytool -import -trustcacerts -alias root -file *ca.crt* -keystore *yourkeystore.jks* On Mon, Nov 24, 2014 at 11:02 AM, Kernel freak wrote: > Thank you, and what about the

Re: Deploying .ca-bundle file & .crt file as SSL certificates

2014-11-24 Thread Kernel freak
Thank you, and what about the CA-Bundle file? Did you got a chance to look at the question I have posted on Stackoverflow mentioned in the original question? On Mon, Nov 24, 2014 at 4:51 PM, Niranjan Babu Bommu < niranjan.bo...@gmail.com> wrote: > Hi Kernel, > > I think you have create a keystore

Re: Deploying .ca-bundle file & .crt file as SSL certificates

2014-11-24 Thread Niranjan Babu Bommu
Hi Kernel, I think you have create a keystore from the cert, please follow these instruction and ket me know. Create store with temporary key inside: keytool -genkey -alias -keystore yourkeystore.jks -storepass Hello1 Then delete existing entry: keytool -delete -alias temp -keystore yourkeysto

Deploying .ca-bundle file & .crt file as SSL certificates

2014-11-24 Thread Kernel freak
Hello friends, I am using apache tomcat and I would like to deploy a Spring-MVC application which I am working on. In that, via Spring-Security I have specified to use https which requires to install the SSL certificate on the server. I am running a Debian Wheezy server, and I have certificate fil