The following certificate installations must be executed in the stated order.
You will need to download either the FreeSSL or RapidSSL root CA certificate:
Download - RapidSSL Root Certificate (Base-64 encoded
X.509)
Download - FreeSSL Root Certificate (Base-64 encoded X.509)
Download and rename root.cer
- Import the appropriate root certificate file using:
$ keytool -import - trustcacerts -keystore my.kdb -alias root - file root.cer
With my.kdb being your keystore.
- Import the yourdomain.cer file using:
keytool -import -trustcacerts -keystore my.kdb -alias tomcat -file yourdomain.cer
With my.kdb being your keystore.
- Update server.xml configuration file:
- Open "$JAKARTA_HOME/conf/server.xml" in a text editor.
- Find the following section:
Define a SSL Coyote HTTP/1.1 Connector on port 8443
-->
<Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
port="443" minProcessors="5" maxProcessors="75"
enableLookups="true"
acceptCount="100" debug="0" scheme="https" secure="true"
useURIValidationHack="false" disableUploadTimeout="true">
<Factory
className="org.apache.coyote.tomcat4.CoyoteServerSocketFactory"
clientAuth="false"
protocol="TLS"
keystoreFile="my.kdb"
keystorePass="YOUR_KEYSTORE_PASSWORD" />
</Connector>
- If you want Tomcat to use the default SSL port, change all instances of the port
number 8443 to 443.
- Start or restart Tomcat using the appropriate startup script (startup.sh for unix/linux
or startup.bat for windows)
»
Return to Install Instruction List