GlobalSign Security Solutions Secure SSL Certificates  |  Home  |  Contact Us    
Search Technical Support & FAQs  
 
Certificates SSL menu divider Enterprise Solutions SSL menu divider Partners SSL menu divider Customer Support SSL menu divider About GlobalSign

 

 


Customer Support > SSL Certificates > Install SSL Certificate in Tomcat

One GlobalSign has sent you your certificate, copy it into a text editor such as notepad and save as " yourdomain.cer"

Note: You must carry out the following tasks in this order:

Download the GlobalSign Root certificates - these can be found here:

1. Import the appropriate root certificates using:

$ keytool -import -trustcacerts -keystore mystore.kdb -alias root - file root.cer

"mystore.kdb" being your keystore.

2. Import the "yourdomain.cer" file using:

keytool -import -trustcacerts -keystore mystore.kdb -alias tomcat -file yourdomain.cer

With "mystore.kdb" being your keystore.

Update server.xml configuration file:

1. Open "$JAKARTA_HOME/conf/server.xml" in a text editor.

2. Find the following section:

- <!--
Define a SSL Coyote HTTP/1.1 Connector on port 8443
-->
<Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
port="443" minProcessors="5" maxProcessors="75"
enableLookups="true"
acceptCount="100" debug="0" scheme="https" secure="true"
useURIValidationHack="false" disableUploadTimeout="true">
<Factory
className="org.apache.coyote.tomcat4.CoyoteServerSocketFactory"
clientAuth="false"
protocol="TLS"
keystoreFile="mystore.kdb"
keystorePass="YOUR_KEYSTORE_PASSWORD" />
</Connector>

3. If you want Tomcat to use the default SSL port, change all instances of the port number "8443" to 443.

4. Start or restart Tomcat

 

   
  SSL Certificate Supported Browsers
GlobalSign Inc (a member of GMO Internet Inc group TSE:9449) offers online security services and has been operating as a
trusted Root Certification Authority
for over 10 years. GlobalSign Certificates are trusted by all popular Browsers,
Operating Systems, Devices and Applications and include SSL, SSL Certificates, Extended SSL Certificates, Code Signing,
Personal Digital IDs
, Enterprise Digital IDs, internal PKI & Microsoft CA root signing.