web server certificate has expired

nessts
Valued Contributor II

since upgrading to 8.52 i get this message.
i have checked under settings and it says
Tomcat Web Server Certificate
The ability to modify this setting from the JSS is disabled. anybody know where or how to fix this? i assume my production server is going to have the same problem shortly.

2 REPLIES 2

nessts
Valued Contributor II

oh and i did use the server admin tool to create a new SSL cert, but its not helped either.

jarednichols
Honored Contributor

The cert you've generated with Server Admin uses OpenSSL. Tomcat relies on the Java Secure Socket Extension (JSSE) keystore. They're different, but you can convert from one to the other. The key issue is making sure your private key gets properly exported. Look here: http://conshell.net/wiki/index.php/OpenSSL_to_Keytool_Conversion_tips

Related, if you're ever looking to go the other way (Keytool to OpenSSL) have a look here: http://conshell.net/wiki/index.php/Keytool_to_OpenSSL_Conversion_tips I've used portecle to great result.