| Jakarta —
Tomcat |
| Generate a Certificate Signing
Request — CSR |
Follow these instructions to generate a CSR for your Web site. When you have completed this process, click the
Close button above to close this window and continue to the next step.
If you are not using JDK 1.4 or higher, you must download and install
the Java Secure Socket Extensions — JSSE.
- Generate a private key with the following command:
$JAVA_HOME/bin/keytool -genkey -alias tomcat -keyalg RSA -keystore /path/to/domainname.kdb
You will be prompted for a password. Tomcat uses a default password of
changeit. If you use a different password, you will need to specify a custom password in the server.xml configuration file.
The next field that you will be prompted for is: What is your first and last
name? At this prompt, you must specify the common name — FQDN of your web site. You will then be prompted for your organizational unit, organization, etc.
- Generate the Certificate Signing Request — CSR
$JAVA_HOME/bin/keytool -certreq -alias tomcat -keystore /path/to/keystore.kdb -file filename.csr
You will not be prompted for the common name, organization, etc. The keytool will use the values that you specify when generating the private key.
Distinguished
Name Field |
Explanation |
Example |
| Common
Name |
The
fully qualified domain name for your web server. This must
be an exact match. |
If
you intend to secure the URL https://www.supralink.com/,
then your CSR's common name
must be www.supralink.com. |
| Organization |
The
exact legal name of your organization. Do not abbreviate
your organization name. |
SupraLink |
| Organization
Unit |
Section
of the organization. |
Marketing |
| City
or Locality |
The
city where your organization is legally located. |
Montréal |
| State
or Province |
The
state or province where your organization is legally
located. Cannot be abbreviated. |
Quebec |
| Country |
The
two-letter ISO abbreviation for your country. |
CA |
- Cut and paste your CSR with a text editor, then Submit your CSR to SupraLink - you will be asked to complete the agreement and the enrollment form as well. Be sure to include -----BEGIN NEW CERTIFICATE REQUEST-----
and -----END NEW CERTIFICATE REQUEST-----.
- Make a backup of the keystore.kdb key database. SupraLink is not responsible if your server crashes and this file is lost.
If you lose the password, you must purchase another certificate.
Innovating Information Security
SupraLink, in partnership with GeoTrust, the leading provider of next
generation information security services, delivers secure e-commerce
transactions, identity verification and authentication solutions to
the global web community. SupraLink ensures a new level of
e-business security — your first step toward leveraging the full
business potential of the Internet.
|