I have to say the documentation of this product (both on the web and the application itself) is terrible. Please correct/update this.
This is what I did to make it work:
- follow step 1-4 of the post from Raghuraman (1st reply)
- navigate to "<installation dir.>\jre\bin", create
new folder called certs and ...
- download the sha2 certificate from GoDaddy (choose whatever, only
need the host cert)
again, rename it to serverhost.crt to make it easy - also download the following from https://certs.godaddy.com/repository:
- gdroot-g2.crt
- gdroot-g2_cross.crt
- gdig2.crt
- using cmd, navigate to "<installation dir.>\jre\bin"
- run the command in this order:
- keytool -import -alias root -keystore selfservice.keystore -trustcacerts -file .\certs\gdroot-g2.crt
- keytool -import -alias cross -keystore selfservice.keystore -trustcacerts -file .\certs\gdroot-g2_cross.crt
- keytool -import -alias inter -keystore selfservice.keystore -trustcacerts -file .\certs\gdig2.crt
- keytool -import -alias tomcat -keystore selfservice.keystore -trustcacerts -file .\certs\serverhost.crt
I found the certificate file(s) and the command required after
reading the Guide
to install SSL Certificate here:
http://www.manageengine.com/products/self-service-password/self-service-password-help-docs.html
Problem is:
- in the document, page 6, For GoDaddy certificates
section:
it's missing the last step for installing the host certificate - the commands required on this document is not the same as the one on SSL certification tool as I explained on my previous post
Last question:
Is there any difference between using the SSL Certification Tool (via web interface) and running the commands below?
-
keytool -genkey -alias tomcat -keyalg RSA -sigalg SHA256withRSA
-keypass 123456 -keyalg RSA -keysize 2048 -validity 1000
-keystore selfservice.keystore
- keytool -certreq -alias tomcat -keyalg RSA -sigalg SHA256withRSA -keystore selfservice.keystore -file server.csr