SSL Certificate Renewal - Tomcat 4.x/5.x/6.x
After we approve your certificate renewal request, you can download your SSL and intermediate certificate. For more information, see Downloading an SSL Certificate. You must install both files on your Web server.
You can also download the intermediate certificate here.
Follow the instructions below to download and install signed certificate and intermediate certificates on your Web server.
Note that Java 2 SDK 1.2 or above must be installed as the following describes how to install a certificate using keytool.
Installation Option One: Installing SSL Certificate and CA Bundle (gd_bundle.crt) Implementing a PKCS12 Keystore
Before you install your SSL certificate you must download our root certificate bundle (gd_bundle.crt) on your Web server. You may download the bundle from the repository.
Use the following OpenSSL command to combine the ca bundle (gd_bundle.crt) and your SSL certificate:
Updating the server.xml Configuration File
When you have completed installing your certificate, you must configure your Tomcat server.xml configuration file to point to the correct pkcs12 keystore file:
- Open the server.xml file.
- After uncommenting the SSL/TLS connector from server.xml, locate the following
Factory tag section and COMMENT IT OUT:<Factory className="org.apache.coyote.tomcat4.CoyoteServerSocketFactory" clientAuth="false" protocol="TLS" />
- Add the following directives to the Connector tag:
- Restart Tomcat.
keystorePass="changeit"
keystoreType="PKCS12"
Installation Option Two: Installing SSL Certificate and Intermediate Certificates Separately
Installing Root and Intermediate Certificates
Once you have downloaded the certificates to your local machine, please use the following keytool commands to import them:
Root:
First intermediate (gd_cross_intermediate.crt):
Second intermediate (gd_intermediate.crt):
Installing SSL Certificate
- Use the following command to import the issued certificate into your keystore.
- keytool -import -alias tomcat -keystore tomcat.keystore -trustcacerts -file <name of your certificate>
When you have completed installing your certificate, you must configure your Tomcat server.xml configuration file to point to the correct keystore file:
- Open the server.xml file.
- After uncommenting the SSL/TLS connector from server.xml, locate
the following text section:<Factory className="org.apache.coyote.tomcat4.CoyoteServerSocketFactory" clientAuth="false" protocol="TLS" />
- Add the "keystoreFile" and "keystorePass" directives:<Factory className="org.apache.coyote.tomcat4.CoyoteServerSocketFactory" clientAuth="false" protocol="TLS" keystoreFile="/full/path/to/tomcat.keystore" keystorePass="changeit" />
- Restart Tomcat.
Certificate Renewal Instructions
SSL Certificate Renewal - Cpanel WebHost Manager
Generating a Renewal Certificate Signing Request for Microsoft IIS 5.x
SSL Certificate Renewal - Apache 1.3 / 2.x
SSL Certificate Renewal - Parallels Plesk Panel
Renewing a Cisco Intercompany Media Engine Certificate
Sending Message...Have a question about the content of this article?
0 min expected wait time