Renew SSL certificates in Tomcat
Renew SSL certificates in Tomcat
Step 1:
Prepare your SSL certificate files
You have
to import all the necessary certificate files separately in the correct order.
Run the commands below for each certificate type:
Root Certificate:
keytool
-import -alias root -keystore example.jks -trustcacerts -file root.crt
Intermediate Certificate:
keytool
-import -alias intermediate -keystore example.jks -trustcacerts -file
intermediate.crt
Step 2: Edit the Tomcat configuration file
After the import, your next step is to edit the Tomcat
configuration file. By default, it’s called server.xml and
resides in the Home_Directory/conf folder.
Locate
the configuration file.You should see a few lines of code similar to the
example below:
<Connector
port="443" protocol="HTTP/1.1"
SSLEnabled="true"
scheme="https" secure="true"
clientAuth="false"
sslProtocol="TLS" keystoreFile="/your_path/yourkeystore.jks"
keystorePass="password_for_your_key_store" />
Please change the parts in bold. For keystoreFile parameter,
specify the directory of your keystoreFile. For keystorePass attribute,
enter your keystore password.
Comments