Home | SSL Certificate Products | FAQ | Support | Resellers | International | About Us | News | Contact Us

SSL Certificate Home

Jakarta-Tomcat & Other Java Based Web Servers

Installing your SSL Certificate / Web Server Certificate / Secure Server Certificate from RapidSSL.com

Firstly when your issuance email arrives your server certificate will be contained within the email.

  1. Copy your web server certificate into a text editor such as notepad and save as yourdomain.cer on a Windows machine with IE 5+.

The following certificate installations must be executed in the stated order.

You will need to download either the FreeSSL or RapidSSL root CA certificate:
Download - RapidSSL Root Certificate (Base-64 encoded X.509)
Download - FreeSSL Root Certificate (Base-64 encoded X.509)
Download and rename root.cer

1. Import the appropriate root certificate file using:

$ keytool -import -trustcacerts -keystore my.kdb -alias root - file root.cer

With my.kdb being your keystore.

2. Import the yourdomain.cer file using:

keytool -import -trustcacerts -keystore my.kdb -alias tomcat -file yourdomain.cer

With my.kdb being your keystore.

 

Update server.xml configuration file:

1. Open "$JAKARTA_HOME/conf/server.xml" in a text editor.

2. Find the following section:

- <!--
Define a SSL Coyote HTTP/1.1 Connector on port 8443
-->
<Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
port="443" minProcessors="5" maxProcessors="75"
enableLookups="true"
acceptCount="100" debug="0" scheme="https" secure="true"
useURIValidationHack="false" disableUploadTimeout="true">
<Factory
className="org.apache.coyote.tomcat4.CoyoteServerSocketFactory"
clientAuth="false"
protocol="TLS"
keystoreFile="my.kdb"
keystorePass="YOUR_KEYSTORE_PASSWORD" />
</Connector>

3. If you want Tomcat to use the default SSL port, change all instances of the port number 8443 to 443.

4. Start or restart Tomcat using the appropriate startup script (startup.sh for unix/linux or startup.bat for windows)