Import certificate into Apache tomcat: unable to install chain from response
After getting the certificate, I tried to import it as mentioned here: http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html#Edit%20the%20Tomcat%20Configuration%20File
But I got this error:
C:\Program Files (x86)\Java\jre6\bin>keytool -import -alias tomcat -keystore C:\ SSL\.keystore -file C:\SSL\SSL_Internal_Certificate_for_isdc-planning.cer
Enter keystore password:
keytool error: java.lang.Exception: Failed to establish chain from reply
I need to import the first chain certificate, as per apache doc Import the chain certificate to keystore
keytool -import -alias root -keystore <your_keystore_filename> \
-trustcacerts -file <filename_of_the_chain_certificate>
When I printed out the certificate whose issuer:
Issuer: CN = Intranet Basic Edition CA 2B
I have downloaded the chain certificates:
- Intranet Core Edition CA 1A (1) .crt
- Intranet Core Edition CA 1A (2) .crt
- Intranet Core Edition CA 1A.crt
- Intranet Core Edition CA 1B (1) .crt
- Intranet Core Edition CA 1B (2) .crt
- Internal Intranet CA Core Edition 1B.crt
- Intranet Core Edition CA 2A (1) .crt
- Internal Intranet Edition CA 2A.crt
- Intranet Core Edition CA 2B (1) .crt
- Internal intranet version of CA 2B.crt
- Basic CA Policy (1) .crt
- Intranet CA.crt Basic Policy
- Root CA.crt
The issuer of the main intranet core system CA 2B.crt is the main policy center of the internal policy and its issuer: the root CA certificate But I cannot import 3 certificates into the root alias.
And imported "Intranet Basic Issue CA 2B.crt" to the root directory and then re-import the tomcat alias But got the same error:
keytool error: java.lang.Exception: Could not set chain from response
What is the correct way to import the correct chain certificate?
a source to share
No one has answered this question yet
Check out similar questions: