Generate CSR for SSL

vinsnash

I found this under "Tips and Tricks"

I'm trying it on an evaluation copy but can't get past the password entry in step 1. Afraid to try on our live system.

I've asked our ISP to prepare the CSR but their response is that were not using IIS they will have to "investigate" (read $$$). This is way over my head but we do need an SSL certificate to launch our application.

Any suggestions on how this is down with AwareIM?

Vins Nash

e5n_devildog

For a local environment I typically use the following steps to setup a self-signed certificate.

http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html

· Create a keystore file to store the server's private key and self-signed certificate by executing the following command:
Windows:

%JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA (In AwareIM - JDK\bin\keytool -genkey -alias tomcat -keyalg RSA)

and specify a password value of "changeit".

· Uncomment the "SSL HTTP/1.1 Connector" entry in $CATALINA_HOME/conf/server.xml and tweak as necessary. (In AwareIM - Tomcat/conf/server.xml)

This is a great way to setup a non-Chain Authority (Verisign, Thawte...) certificate. Perfectly applicable for local testing and verification. I have found that when setting up a live production SSL certificate it is very useful to get someone on the line from the certificate provider. They have steps for every type of implementation and can walk you through the process.

vinsnash

Thanks for the assist. The first problem I had was trying to use "chaneit" which threw me an error message that the "keystore" had been removed or tampered with. Then I looked up the "tomcat" process and found that the parameters for the latest version where far different from what the steps I found on the forum here were.

In any event the techies at my ISP figured out. Actually all of this is way over my head.

Vins