how to build keystore for shibboleth?

[Leonard Kroll]

Hi, 
Just got a cert from our CA EduCause.
I have never done this before, do don't assume I know anything :-)
 
How do I correctly create the keystore from the cert?
I have server.crt, server,key and server.csr file.
I also have a CA intermediate file with a csr chain in it.
 
I tried to build the idp.jks file, but when I try to use it I get ssl
errors.
What did I miss doing or do wrong?
 
Oct 28, 2011 3:58:10 PM org.apache.coyote.http11.Http11Protocol init
SEVERE: Error initializing endpoint
java.io.IOException: jsse.invalid_ssl_conf
        at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.checkConfig(JSSESocket
Factory.java:755)
        at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.init(JSSESocketFactory
.java:460)
        at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocke
tFactory.java:130)
        at
org.apache.tomcat.util.net.JIoEndpoint.init(JIoEndpoint.java:538)
        at
org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:176)
        at
org.apache.catalina.connector.Connector.initialize(Connector.java:1007)
        at
org.apache.catalina.core.StandardService.initialize(StandardService.java
:677)
        at
org.apache.catalina.core.StandardServer.initialize(StandardServer.java:7
95)
        at org.apache.catalina.startup.Catalina.load(Catalina.java:540)
        at org.apache.catalina.startup.Catalina.load(Catalina.java:560)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown
Source)
        at java.lang.reflect.Method.invoke(Unknown Source)
        at
org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:261)
        at
org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
Caused by: javax.net.ssl.SSLException: No available certificate or key
corresponds to the SSL cipher suites which are ena
bled.
        at
com.sun.net.ssl.internal.ssl.SSLServerSocketImpl.checkEnabledSuites(Unkn
own Source)
        at
com.sun.net.ssl.internal.ssl.SSLServerSocketImpl.accept(Unknown Source)
        at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.checkConfig(JSSESocket
Factory.java:751)
        ... 15 more
 
 
 
 
Leonard Kroll
UNIX / GIS Administrator
Univ. Massachusetts Boston
Leonard(dot)Kroll(at)umb.edu <mailto:at at umb.edu> 
Phone: 617-287-5048
fax:      617-287-5224
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111028/12a40f85/attachment-0001.html