Tomcat GlassFish SSL CSR creation & installation example

cd /opt/glassfish4/glassfish/domains/domain1/config
keytool -list -v -alias s1as -keystore keystore.jks
cp keystore.jks keystore.jks_backup
keytool -delete -alias s1as -keystore keystore.jks
keytool -keysize 4096 -genkey -alias s1as -keyalg RSA -dname "CN=*.yourdomain.com,O=Company,L=Wattil,S=SG,C=CH" -keypass changeit -storepass changeit -keystore keystore.jks
keytool -list -v -alias s1as -keystore keystore.jks
keytool -certreq -alias s1as -keystore keystore.jks -storepass changeit -keypass changeit -file yourdomain.com.csr
cat yourdomain.com.csr
#Order SSL certificate with this CSR and copy the certificate .ZIP file as deliverd from COMODO into the current folder
unzip 1459xxx.zip
keytool -import -alias COMODORSADomainValidationSecureServerCA -keystore keystore.jks -trustcacerts -file COMODORSADomainValidationSecureServerCA.crt
keytool -import -alias COMODORSAAddTrustCA -keystore keystore.jks -trustcacerts -file COMODORSAAddTrustCA.crt
keytool -import -alias AddTrustExternalCARoot -keystore keystore.jks -trustcacerts -file AddTrustExternalCARoot.crt
keytool -import -alias s1as -keystore keystore.jks -trustcacerts -file STAR_yourdomain_com.crt
keytool -list -v -alias s1as -keystore keystore.jks

Was this answer helpful?

 Print this Article

Also Read

Enabling Webserver (WebStation) for HTTP validation under Synology DiskStation Manager

In Synology Diskstation you first have to enable the "WebStation" service. "WebStation" is the...

Retrieving WHOIS contact details for .de Domains

https://www.denic.de/webwhois/ will also sohw the owner contact details (Linux command line...

Wie erstelle ich einen CSR (Certificate Signing Request) in Microsoft IIS ?

Für Microsoft IIS und Exchange Console empfehlen wir NICHT unseren Online Generator zu nutzen...

Multi-Domain (SAN) certificates: will "www.domain.com" and "domain.com" count as two SAN entries?

When using multi-domain SSL certificates www and non-www versions of the domain name are...

Can you issue SSL certificates for .cu (Cuba) and .ir (Iran) domains?

COMODO: no, unfortunately not possible. GEOTRUST: no, unfortunately not possible.