tomcatsslssl-certificatekeystorethawte

SSL intermediate certificates

We are having a lot of trouble getting our SSL certificates to work properly.

We have generated our keystores (using multiple sources) from an existing key and certificate by first creating a pkcs12 file and exporting it to a java keystore.

Now, Thawte requires that you install 2 intermediate ca files. If I inspect our keystore, all three (the 2 intermediates and our own) are present. Tomcat starts up properly, but on visiting the site (and using the verisign ssl checker), the two intermediate certificates are not picked up.

If anyone has more experience with installing certificates from Thawte, any input would be appreciated. We have the following files at our disposal. Unfortunately we do not have the original keystore used to create the CSR, but we do have the private key.

  1. CSR file
  2. Private key (.key file)
  3. Our .crt file
  4. The primary and secondary intermediate files from Thawte (as seperate and a bundled .p7b files)

Also, we are using tomcat 7.0.27 without apache.

Thanks!

Solution

  • Seems the only way we got it working properly was by revoking the old certificate and renewing it with a new CSR.