Configuring HTTPS for the Administrator Tool Using a Certificate Signed by a Certificate Authority

Configuring HTTPS for the Administrator Tool Using a Certificate Signed by a Certificate Authority

Step 3. Import the Signed Certificate

Step 3. Import the Signed Certificate

When you receive the signed digital certificate from the certificate authority, you must import the certificate into the keystore file that you created.
Some certificate authorities issue root and intermediate certificates that you also import into the keystore file. This step includes examples for SSL certificates provided by Go Daddy. Apply similar procedures for the certificate authority that you use.
If you request a signed certificate from Go Daddy, you receive the following certificate files that you import into the keystore file:
  • valicert_class2_root.cer. The server root certificate.
  • gd_cross_intermediate.crt. The intermediate cross certificate.
  • gd_intermediate.crt. The intermediate certificate.
  • <host_name>.crt. The signed site certificate that you requested.
You also receive the gd_bundle.crt file that is not used in this example.
  1. To import the root, intermediate cross, and intermediate certificates into the keystore, run the keytool utility with the import option.
    Import each certificate with a separate command. Use a unique alias name for each certificate. Use the keystore file name that you used with the genkey and certreq options.
    To import the root certificate, use the following example syntax:
    keytool -import -alias root -keystore admintool.keystore -trustcacerts -file valicert_class2_root.cer
    To import the intermediate cross certificate, use the following example syntax:
    keytool -import -v -alias cross -keystore admintool.keystore -trustcacerts -file gd_cross_intermediate.crt
    To import the intermediate certificate, use the following example syntax:
    keytool -import -alias intermed -keystore admintool.keystore -trustcacerts -file gd_intermediate.crt
  2. To import the signed site certificate, run the keytool utility with the import option. Use the keystore alias and file name that you used with the genkey and certreq options.
    For example, use the following syntax:
    keytool –import –alias admintool -keystore admintool.keystore -trustcacerts -file cax164796.crt

0 COMMENTS

We’d like to hear from you!