SSL Configuration for tomcat 8
up vote
-1
down vote
favorite
I have followed below steps to make tomcat https/ssl. please correct the steps if they are wrong, as I am facing issues while accessing the url.
1) keytool -genkey -alias tomcat -keyalg RSA -keystore uat_application
2) keytool -certreq -keyalg RSA -alias tomcat -file certreq.csr -keystore uat_application
After above steps, I have sent the generated CSR to our company CA authority to generate certificate. The CA is local to our company.
3) After, I received certificate from our CA. I have imported all root, intermediate and certificate to keystore using below commands.
a) keytool -import -alias root -keystore uat_application -trustcacerts -file root.cer
b) keytool -import -alias intermediate -keystore uat_application -trustcacerts -file intermediate.cer
c) keytool -import -alias tomcat -keystore uat_application -file certnew.cer
Below is the error that we are receiving.
In IE :- The hostname in the website’s security certificate differs from the website you are trying to visit.
Error Code: DLG_FLAGS_SEC_CERT_CN_INVALID
In Chrome :- NET::ERR_CERT_COMMON_NAME_INVALID
This server could not prove that it is pg1tedmsw03; its security certificate does not specify Subject Alternative Names. This may be caused by a misconfiguration or an attacker intercepting your connection
when accessed locally on the server :-
The security certificate presented by this website was issued for a different website's address
please suggest.
windows
google-chrome internet-explorer ssl tomcat8 asked Nov 19 at 11:45
praveenkolluri
123
add a comment |
up vote
-1
down vote
favorite
I have followed below steps to make tomcat https/ssl. please correct the steps if they are wrong, as I am facing issues while accessing the url.
1) keytool -genkey -alias tomcat -keyalg RSA -keystore uat_application
2) keytool -certreq -keyalg RSA -alias tomcat -file certreq.csr -keystore uat_application
After above steps, I have sent the generated CSR to our company CA authority to generate certificate. The CA is local to our company.
3) After, I received certificate from our CA. I have imported all root, intermediate and certificate to keystore using below commands.
a) keytool -import -alias root -keystore uat_application -trustcacerts -file root.cer
b) keytool -import -alias intermediate -keystore uat_application -trustcacerts -file intermediate.cer
c) keytool -import -alias tomcat -keystore uat_application -file certnew.cer
Below is the error that we are receiving.
In IE :- The hostname in the website’s security certificate differs from the website you are trying to visit.
Error Code: DLG_FLAGS_SEC_CERT_CN_INVALID
In Chrome :- NET::ERR_CERT_COMMON_NAME_INVALID
This server could not prove that it is pg1tedmsw03; its security certificate does not specify Subject Alternative Names. This may be caused by a misconfiguration or an attacker intercepting your connection
when accessed locally on the server :-
The security certificate presented by this website was issued for a different website's address
please suggest.
windows
google-chrome internet-explorer ssl tomcat8 asked Nov 19 at 11:45
praveenkolluri
123
double clic on the certificate file (if it's a .cer or .der) and see for which domain it is. Check this is really the domain you are trying to access.
– Eugène Adell
Nov 19 at 12:47
Thanks for your response on this, may I know which property in the certificate details tab will give the domain information. Is it CN? OU? DC? in the Issuer property
– praveenkolluri
Nov 20 at 6:50
You need to check the CN
– Eugène Adell
Nov 20 at 8:52
CN looks fine with correct value as required
– praveenkolluri
Nov 20 at 8:56
add a comment |
up vote
-1
down vote
favorite
up vote
-1
down vote
favorite
I have followed below steps to make tomcat https/ssl. please correct the steps if they are wrong, as I am facing issues while accessing the url.
1) keytool -genkey -alias tomcat -keyalg RSA -keystore uat_application
2) keytool -certreq -keyalg RSA -alias tomcat -file certreq.csr -keystore uat_application
After above steps, I have sent the generated CSR to our company CA authority to generate certificate. The CA is local to our company.
3) After, I received certificate from our CA. I have imported all root, intermediate and certificate to keystore using below commands.
a) keytool -import -alias root -keystore uat_application -trustcacerts -file root.cer
b) keytool -import -alias intermediate -keystore uat_application -trustcacerts -file intermediate.cer
c) keytool -import -alias tomcat -keystore uat_application -file certnew.cer
Below is the error that we are receiving.
In IE :- The hostname in the website’s security certificate differs from the website you are trying to visit.
Error Code: DLG_FLAGS_SEC_CERT_CN_INVALID
In Chrome :- NET::ERR_CERT_COMMON_NAME_INVALID
This server could not prove that it is pg1tedmsw03; its security certificate does not specify Subject Alternative Names. This may be caused by a misconfiguration or an attacker intercepting your connection
when accessed locally on the server :-
The security certificate presented by this website was issued for a different website's address
please suggest.
windows
google-chrome internet-explorer ssl tomcat8 asked Nov 19 at 11:45
praveenkolluri
123
I have followed below steps to make tomcat https/ssl. please correct the steps if they are wrong, as I am facing issues while accessing the url.
1) keytool -genkey -alias tomcat -keyalg RSA -keystore uat_application
2) keytool -certreq -keyalg RSA -alias tomcat -file certreq.csr -keystore uat_application
After above steps, I have sent the generated CSR to our company CA authority to generate certificate. The CA is local to our company.
3) After, I received certificate from our CA. I have imported all root, intermediate and certificate to keystore using below commands.
a) keytool -import -alias root -keystore uat_application -trustcacerts -file root.cer
b) keytool -import -alias intermediate -keystore uat_application -trustcacerts -file intermediate.cer
c) keytool -import -alias tomcat -keystore uat_application -file certnew.cer
Below is the error that we are receiving.
In IE :- The hostname in the website’s security certificate differs from the website you are trying to visit.
Error Code: DLG_FLAGS_SEC_CERT_CN_INVALID
In Chrome :- NET::ERR_CERT_COMMON_NAME_INVALID
This server could not prove that it is pg1tedmsw03; its security certificate does not specify Subject Alternative Names. This may be caused by a misconfiguration or an attacker intercepting your connection
when accessed locally on the server :-
The security certificate presented by this website was issued for a different website's address
please suggest.
windows
google-chrome internet-explorer ssl tomcat8 windows
google-chrome internet-explorer ssl tomcat8 asked Nov 19 at 11:45
praveenkolluri
123
asked Nov 19 at 11:45
praveenkolluri
123
asked Nov 19 at 11:45
praveenkolluri
123
asked Nov 19 at 11:45
praveenkolluri
123
asked Nov 19 at 11:45
praveenkolluri
123
123
double clic on the certificate file (if it's a .cer or .der) and see for which domain it is. Check this is really the domain you are trying to access.
– Eugène Adell
Nov 19 at 12:47
Thanks for your response on this, may I know which property in the certificate details tab will give the domain information. Is it CN? OU? DC? in the Issuer property
– praveenkolluri
Nov 20 at 6:50
You need to check the CN
– Eugène Adell
Nov 20 at 8:52
CN looks fine with correct value as required
– praveenkolluri
Nov 20 at 8:56
add a comment |
double clic on the certificate file (if it's a .cer or .der) and see for which domain it is. Check this is really the domain you are trying to access.
– Eugène Adell
Nov 19 at 12:47
Thanks for your response on this, may I know which property in the certificate details tab will give the domain information. Is it CN? OU? DC? in the Issuer property
– praveenkolluri
Nov 20 at 6:50
You need to check the CN
– Eugène Adell
Nov 20 at 8:52
CN looks fine with correct value as required
– praveenkolluri
Nov 20 at 8:56
double clic on the certificate file (if it's a .cer or .der) and see for which domain it is. Check this is really the domain you are trying to access.
– Eugène Adell
Nov 19 at 12:47
double clic on the certificate file (if it's a .cer or .der) and see for which domain it is. Check this is really the domain you are trying to access.
– Eugène Adell
Nov 19 at 12:47
Thanks for your response on this, may I know which property in the certificate details tab will give the domain information. Is it CN? OU? DC? in the Issuer property
– praveenkolluri
Nov 20 at 6:50
Thanks for your response on this, may I know which property in the certificate details tab will give the domain information. Is it CN? OU? DC? in the Issuer property
– praveenkolluri
Nov 20 at 6:50
You need to check the CN
– Eugène Adell
Nov 20 at 8:52
You need to check the CN
– Eugène Adell
Nov 20 at 8:52
CN looks fine with correct value as required
– praveenkolluri
Nov 20 at 8:56
CN looks fine with correct value as required
– praveenkolluri
Nov 20 at 8:56
add a comment |
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53373951%2fssl-configuration-for-tomcat-8%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
double clic on the certificate file (if it's a .cer or .der) and see for which domain it is. Check this is really the domain you are trying to access.
– Eugène Adell
Nov 19 at 12:47
Thanks for your response on this, may I know which property in the certificate details tab will give the domain information. Is it CN? OU? DC? in the Issuer property
– praveenkolluri
Nov 20 at 6:50
You need to check the CN
– Eugène Adell
Nov 20 at 8:52
CN looks fine with correct value as required
– praveenkolluri
Nov 20 at 8:56