Chris.

I had success when I re-import SSL certificate using same name alias of
PrivateKeyEntry and name alias used when I generate CSR (repository).

It's ok now!

Thank you very much!!!

Adriano


Em Qui, 2015-06-11 às 09:59 -0400, Christopher Schultz escreveu:
> Adriano,
> 
> On 6/11/15 9:45 AM, Adriano Matos Meier wrote:
> >>> I tried to add keyAlias="server" in my server.xml, but I
> >>> received this error:
> >> 
> >> What does "keytool -list" show for that keystore?
> > 
> > It returns 3 entries:
> > 
> > 1 PrivateKeyEntry (Private Key) - alias repository 1
> > trustedCertEntry (Intermediate certificate) - alias intermed 1
> > trustedCertEntry (SSL certificate) - alias server
> 
> The "keyAlias" attribute is for a key, not a cert.
> 
> You want:
> 
> <Connector ...
>   keyAlias="repository"
>   ...
>   />
> 
> I could have sworn that you could also specify the "alias" of the
> certificate, but it looks like maybe not. You may have to remove the
> certificate called "server" and instead re-import the certificate
> using the alias "tomcat".
> 
> Try just using keyAlias="repository" first.
> 
> -chris
> 
> > Em Qui, 2015-06-11 às 09:35 -0400, Christopher Schultz escreveu:
> >>> 
> >>> LifecycleException:  service.getName(): "Catalina";  Protocol 
> >>> handler start failed: java.io.IOException: Alias name server
> >>> does not identify a key entry
> >>> 
> >>> The alias of SSL certificate needs to be same of CSR?
> >>> 
> >>> What I did wrong?
> >>> 
> >>> Can anybody help me?
> >>> 
> >>> I appreciate any help!
> >> 
> >> 
> >> -chris
> > 
> > ---------------------------------------------------------------------
> >
> > 
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> > For additional commands, e-mail: users-h...@tomcat.apache.org
> > 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 

Reply via email to