<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=ProgId content=Word.Document>
<meta name=Generator content="Microsoft Word 11">
<meta name=Originator content="Microsoft Word 11">
<link rel=File-List href="cid:filelist.xml@01CC958C.9D3FDCB0">
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="City"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="State"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PersonName"/>
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:DoNotRelyOnCSS/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:DisplayBackgroundShape/>
<w:SpellingState>Clean</w:SpellingState>
<w:GrammarState>Clean</w:GrammarState>
<w:DocumentKind>DocumentEmail</w:DocumentKind>
<w:EnvelopeVis/>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
</w:Compatibility>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
</w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" LatentStyleCount="156">
</w:LatentStyles>
</xml><![endif]--><!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
        {font-family:Wingdings;
        panose-1:5 0 0 0 0 0 0 0 0 0;
        mso-font-charset:2;
        mso-generic-font-family:auto;
        mso-font-pitch:variable;
        mso-font-signature:0 268435456 0 0 -2147483648 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {mso-style-parent:"";
        margin:0in;
        margin-bottom:.0001pt;
        mso-pagination:widow-orphan;
        font-size:12.0pt;
        font-family:"Times New Roman";
        mso-fareast-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
        {color:blue;
        text-decoration:underline;
        text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
        {color:purple;
        text-decoration:underline;
        text-underline:single;}
span.EmailStyle17
        {mso-style-type:personal-compose;
        mso-style-noshow:yes;
        mso-ansi-font-size:14.0pt;
        mso-bidi-font-size:14.0pt;
        font-family:"Times New Roman";
        mso-ascii-font-family:"Times New Roman";
        mso-hansi-font-family:"Times New Roman";
        mso-bidi-font-family:"Times New Roman";
        color:windowtext;
        font-weight:normal;
        font-style:normal;
        text-decoration:none;
        text-underline:none;
        text-decoration:none;
        text-line-through:none;}
span.SpellE
        {mso-style-name:"";
        mso-spl-e:yes;}
span.GramE
        {mso-style-name:"";
        mso-gram-e:yes;}
@page Section1
        {size:8.5in 11.0in;
        margin:1.0in 1.25in 1.0in 1.25in;
        mso-header-margin:.5in;
        mso-footer-margin:.5in;
        mso-paper-source:0;}
div.Section1
        {page:Section1;}
-->
</style>
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
        {mso-style-name:"Table Normal";
        mso-tstyle-rowband-size:0;
        mso-tstyle-colband-size:0;
        mso-style-noshow:yes;
        mso-style-parent:"";
        mso-padding-alt:0in 5.4pt 0in 5.4pt;
        mso-para-margin:0in;
        mso-para-margin-bottom:.0001pt;
        mso-pagination:widow-orphan;
        font-size:10.0pt;
        font-family:"Times New Roman";
        mso-ansi-language:#0400;
        mso-fareast-language:#0400;
        mso-bidi-language:#0400;}
</style>
<![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple style='tab-interval:.5in'>
<div class=Section1>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>Hi, <o:p></o:p></span></font></p>
<p class=MsoNormal><span class=GramE><font size=4 face="Times New Roman"><span
style='font-size:14.0pt'>Just got a cert from our CA <span class=SpellE>EduCause</span>.</span></font></span><font
size=4><span style='font-size:14.0pt'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>I have never done this before, do don’t assume I know anything </span></font><font
size=4 face=Wingdings><span style='font-size:14.0pt;font-family:Wingdings;
mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:"Times New Roman";
mso-char-type:symbol;mso-symbol-font-family:Wingdings'><span style='mso-char-type:
symbol;mso-symbol-font-family:Wingdings'>J</span></span></font><font size=4><span
style='font-size:14.0pt'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>How do I correctly create the <span class=SpellE>keystore</span> from
the cert?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>I have <span class=SpellE>server.crt</span>, <span class=SpellE>server<span
class=GramE>,key</span></span> and <span class=SpellE>server.csr</span> file.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>I also have a CA intermediate file with a <span class=SpellE>csr</span>
chain in it.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>I tried to build the <span class=SpellE>idp.jks</span> file, but when I
try to use it I get <span class=SpellE>ssl</span> errors.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>What did I miss doing or do wrong?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>Oct 28, 2011 3:58:10 PM org.apache.coyote.http11.Http11Protocol init<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>SEVERE: Error initializing endpoint<o:p></o:p></span></font></p>
<p class=MsoNormal><span class=SpellE><font size=4 face="Times New Roman"><span
style='font-size:14.0pt'>java.io.IOException</span></font></span><font size=4><span
style='font-size:14.0pt'>: <span class=SpellE>jsse.invalid_ssl_conf</span><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><span
class=GramE>at</span> <span class=SpellE>org.apache.tomcat.util.net.jsse.JSSESocketFactory.checkConfig</span>(JSSESocketFactory.java:755)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><span
class=GramE>at</span> <span class=SpellE>org.apache.tomcat.util.net.jsse.JSSESocketFactory.init</span>(JSSESocketFactory.java:460)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><span
class=GramE>at</span> <span class=SpellE>org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket</span>(JSSESocketFactory.java:130)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><span
class=GramE>at</span> <span class=SpellE>org.apache.tomcat.util.net.JIoEndpoint.init</span>(JIoEndpoint.java:538)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><span
class=GramE>at</span>
org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:176)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><span
class=GramE>at</span> <span class=SpellE>org.apache.catalina.connector.Connector.initialize</span>(Connector.java:1007)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><span
class=GramE>at</span> <span class=SpellE>org.apache.catalina.core.StandardService.initialize</span>(StandardService.java:677)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><span
class=GramE>at</span> <span class=SpellE>org.apache.catalina.core.StandardServer.initialize</span>(StandardServer.java:795)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><span
class=GramE>at</span> <span class=SpellE>org.apache.catalina.startup.Catalina.load</span>(Catalina.java:540)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><span
class=GramE>at</span> <span class=SpellE>org.apache.catalina.startup.Catalina.load</span>(Catalina.java:560)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><span
class=GramE>at</span> sun.reflect.NativeMethodAccessorImpl.invoke0(Native
Method)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><span
class=GramE>at</span> <span class=SpellE>sun.reflect.NativeMethodAccessorImpl.invoke</span>(Unknown
Source)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><span
class=GramE>at</span> <span class=SpellE>sun.reflect.DelegatingMethodAccessorImpl.invoke</span>(Unknown
Source)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><span
class=GramE>at</span> <span class=SpellE>java.lang.reflect.Method.invoke</span>(Unknown
Source)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><span
class=GramE>at</span> <span class=SpellE>org.apache.catalina.startup.Bootstrap.load</span>(Bootstrap.java:261)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><span
class=GramE>at</span> <span class=SpellE>org.apache.catalina.startup.Bootstrap.main</span>(Bootstrap.java:413)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>Caused by: <span class=SpellE>javax.net.ssl.SSLException</span>: No
available certificate or key corresponds to the SSL cipher suites which are <span
class=SpellE>ena</span><o:p></o:p></span></font></p>
<p class=MsoNormal><span class=GramE><font size=4 face="Times New Roman"><span
style='font-size:14.0pt'>bled</span></font></span><font size=4><span
style='font-size:14.0pt'>.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><span
class=GramE>at</span> com.sun.net.ssl.internal.ssl.SSLServerSocketImpl.checkEnabledSuites(Unknown
Source)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><span
class=GramE>at</span> <span class=SpellE>com.sun.net.ssl.internal.ssl.SSLServerSocketImpl.accept</span>(Unknown
Source)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span><span
class=GramE>at</span> <span class=SpellE>org.apache.tomcat.util.net.jsse.JSSESocketFactory.checkConfig</span>(JSSESocketFactory.java:751)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'> </span>...
15 more<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><st1:PersonName w:st="on"><em><i><font size=4
face="Times New Roman"><span style='font-size:13.5pt;mso-no-proof:yes'>Leonard
Kroll</span></font></i></em></st1:PersonName><i><font size=4 color=blue><span
style='font-size:13.5pt;color:blue;font-style:italic;mso-no-proof:yes'><br>
</span></font></i><em><i><font size=4 face="Times New Roman"><span
style='font-size:13.5pt;mso-no-proof:yes'>UNIX / GIS Administrator</span></font></i></em><i><font
size=4 color=blue><span style='font-size:13.5pt;color:blue;font-style:italic;
mso-no-proof:yes'><br>
</span></font><em><i><font face="Times New Roman"><span style='mso-no-proof:
yes'>Univ. <st1:State w:st="on">Massachusetts</st1:State> <st1:place w:st="on"><st1:City
w:st="on">Boston</st1:City></st1:place></span></font></i></em><font
color=blue><span style='color:blue;mso-no-proof:yes'><br>
</span></font></i><span style='mso-no-proof:yes'><a href="mailto:at@umb.edu"><em><i><font
color=black face="Times New Roman"><span style='color:windowtext;text-decoration:
none;text-underline:none'>Leonard(dot)Kroll(at)umb.edu</span></font></i></em></a><br>
<em><i><font face="Times New Roman">Phone: 617-287-5048</font></i></em><i><font
color=blue><span style='color:blue;font-style:italic'><br>
</span></font><em><i><font face="Times New Roman">fax:
617-287-5224</font></i></em></i></span><em><i><font color=blue
face="Times New Roman"><span style='color:blue'><o:p></o:p></span></font></i></em></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>