Hi-
Caution: There be geek speak ahead…
If anyone's using a signed certificate for their JSS communication, at some point you may need to export your private key and certificate chain so that you can use that signed certificate with something else, like OpenSSL. The problem with Tomcat (and ergo the Java implementation of the keystore) is that the private key is embedded into the keystore file, not as a separate protected entry on the keystore file. Fight Java with Java and use Portecle.
http://sourceforge.net/projects/portecle/
Worked like a champ!
--
Jared F. Nichols
Desktop Engineer, Client Services
Information Services Department
MIT Lincoln Laboratory
244 Wood Street
Lexington, Massachusetts 02420
781.981.5436
