Import certificate into Apache tomcat: unable to install chain from response

After getting the certificate, I tried to import it as mentioned here: http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html#Edit%20the%20Tomcat%20Configuration%20File

But I got this error:

C:\Program Files (x86)\Java\jre6\bin>keytool -import -alias tomcat -keystore C:\ SSL\.keystore -file C:\SSL\SSL_Internal_Certificate_for_isdc-planning.cer   
Enter keystore password:   
keytool error: java.lang.Exception: Failed to establish chain from reply

      

I need to import the first chain certificate, as per apache doc Import the chain certificate to keystore

keytool -import -alias root -keystore <your_keystore_filename> \  
                -trustcacerts -file <filename_of_the_chain_certificate>

      

When I printed out the certificate whose issuer:

Issuer: CN = Intranet Basic Edition CA 2B

I have downloaded the chain certificates:

  • Intranet Core Edition CA 1A (1) .crt
  • Intranet Core Edition CA 1A (2) .crt
  • Intranet Core Edition CA 1A.crt
  • Intranet Core Edition CA 1B (1) .crt
  • Intranet Core Edition CA 1B (2) .crt
  • Internal Intranet CA Core Edition 1B.crt
  • Intranet Core Edition CA 2A (1) .crt
  • Internal Intranet Edition CA 2A.crt
  • Intranet Core Edition CA 2B (1) .crt
  • Internal intranet version of CA 2B.crt
  • Basic CA Policy (1) .crt
  • Intranet CA.crt Basic Policy
  • Root CA.crt

The issuer of the main intranet core system CA 2B.crt is the main policy center of the internal policy and its issuer: the root CA certificate But I cannot import 3 certificates into the root alias.

And imported "Intranet Basic Issue CA 2B.crt" to the root directory and then re-import the tomcat alias But got the same error:

keytool error: java.lang.Exception: Could not set chain from response

What is the correct way to import the correct chain certificate?

+2


a source to share





All Articles