The file is called "cacerts" and is located in your Java SDK directory's jre/lib/security folder. I'm running Ubuntu and it's actually a simlink to a sub-directory in /etc. A fellow engineer is running Fedora 7 and it's not a simlink.
Regarding your error, do you have gcj installed? And if so, does THAT java binary appear first in your path? The keytool command does not like gcj's java binary. If you don't have gcj installed, make sure the java binary on your path that's being used is indeed SUN's binary. If none of that applies, there may be a problem with your certificate. --adam -----Original Message----- From: uberalles [mailto:[EMAIL PROTECTED] Sent: Tuesday, October 09, 2007 11:54 PM To: users@tomcat.apache.org Subject: Tomcat 5 and SSL I'm using Tomcat 5 on a Fedora Linux box. I originally created a self-signed certificate (for testing purposes) without the keystore entry (still new to this) and I have no idea where that file is. I ran a search for anything .keystore from root and nothing shows up. A keytool -list command shows that there is only one keystore entry and it was made days ago (I thought I had made more since but I guess not). When I try to delete the entry I get the following error: "keytool error: java.lang.IllegalStateException: masked envelope" Does anyone know what this means? Thanks in advance. -- View this message in context: http://www.nabble.com/Tomcat-5-and-SSL-tf4598759.html#a13129881 Sent from the Tomcat - User mailing list archive at Nabble.com. --------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]