Installing your SSL Certificate / Web Server Certificate
/ Secure Server Certificate from ssl247.co.uk
Firstly when your issuance email arrives you will have
your web server certificate in the email.
Copy your web server certificate into a text editor
such as notepad and save as yourdomain.pem.
The following certificate installations must be
executed in the stated order
- Import the "Server Certificate" using
the following command:
$JAVA_HOME/bin/keytool -import -trustcacerts -alias
??? -keystore /path/to/domainname.kdb -file domainname.pem
Note: Replace ???
with the alias specified when creating the CSR.
A confirmation that the certificate has been added to
the keystore will then be presented.
Update server.xml configuration file:
- Open "$JAKARTA_HOME/conf/server.xml"
in a text editor.
- Find the following section:
<Connector className="org.apache.catalina.connector.http.HttpConnector"
port="8443" minProcessors="5"
maxProcessors="75"
enableLookups="true"
acceptCount="10" debug="0" scheme="https"
secure="true">
<Factory className="org.apache.catalina.net.SSLServerSocketFactory"
clientAuth="false" protocol="TLS"
keystoreFile="tomcat.kdb"
keystorePass="password"/>
- If you want Tomcat to use the default SSL port,
change all instances of the port number 8443 to 443.
- Add the keystoreFile and keystorePass directives
to correspond with the keystore file and password
that you are using.
- Start or restart Tomcat using the appropriate startup
script (startup.sh for unix/linux or startup.bat for
windows)