<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">

<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=ProgId content=Word.Document>
<meta name=Generator content="Microsoft Word 11">
<meta name=Originator content="Microsoft Word 11">
<link rel=File-List href="cid:filelist.xml@01CC958C.9D3FDCB0">
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
 name="City"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
 name="State"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
 name="place"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
 name="PersonName"/>
<!--[if gte mso 9]><xml>
 <o:OfficeDocumentSettings>
  <o:DoNotRelyOnCSS/>
 </o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
 <w:WordDocument>
  <w:DisplayBackgroundShape/>
  <w:SpellingState>Clean</w:SpellingState>
  <w:GrammarState>Clean</w:GrammarState>
  <w:DocumentKind>DocumentEmail</w:DocumentKind>
  <w:EnvelopeVis/>
  <w:PunctuationKerning/>
  <w:ValidateAgainstSchemas/>
  <w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
  <w:IgnoreMixedContent>false</w:IgnoreMixedContent>
  <w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
  <w:Compatibility>
   <w:BreakWrappedTables/>
   <w:SnapToGridInCell/>
   <w:WrapTextWithPunct/>
   <w:UseAsianBreakRules/>
   <w:DontGrowAutofit/>
  </w:Compatibility>
  <w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
 </w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
 <w:LatentStyles DefLockedState="false" LatentStyleCount="156">
 </w:LatentStyles>
</xml><![endif]--><!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
 /* Font Definitions */
 @font-face
        {font-family:Wingdings;
        panose-1:5 0 0 0 0 0 0 0 0 0;
        mso-font-charset:2;
        mso-generic-font-family:auto;
        mso-font-pitch:variable;
        mso-font-signature:0 268435456 0 0 -2147483648 0;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
        {mso-style-parent:"";
        margin:0in;
        margin-bottom:.0001pt;
        mso-pagination:widow-orphan;
        font-size:12.0pt;
        font-family:"Times New Roman";
        mso-fareast-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
        {color:blue;
        text-decoration:underline;
        text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
        {color:purple;
        text-decoration:underline;
        text-underline:single;}
span.EmailStyle17
        {mso-style-type:personal-compose;
        mso-style-noshow:yes;
        mso-ansi-font-size:14.0pt;
        mso-bidi-font-size:14.0pt;
        font-family:"Times New Roman";
        mso-ascii-font-family:"Times New Roman";
        mso-hansi-font-family:"Times New Roman";
        mso-bidi-font-family:"Times New Roman";
        color:windowtext;
        font-weight:normal;
        font-style:normal;
        text-decoration:none;
        text-underline:none;
        text-decoration:none;
        text-line-through:none;}
span.SpellE
        {mso-style-name:"";
        mso-spl-e:yes;}
span.GramE
        {mso-style-name:"";
        mso-gram-e:yes;}
@page Section1
        {size:8.5in 11.0in;
        margin:1.0in 1.25in 1.0in 1.25in;
        mso-header-margin:.5in;
        mso-footer-margin:.5in;
        mso-paper-source:0;}
div.Section1
        {page:Section1;}
-->
</style>
<!--[if gte mso 10]>
<style>
 /* Style Definitions */ 
 table.MsoNormalTable
        {mso-style-name:"Table Normal";
        mso-tstyle-rowband-size:0;
        mso-tstyle-colband-size:0;
        mso-style-noshow:yes;
        mso-style-parent:"";
        mso-padding-alt:0in 5.4pt 0in 5.4pt;
        mso-para-margin:0in;
        mso-para-margin-bottom:.0001pt;
        mso-pagination:widow-orphan;
        font-size:10.0pt;
        font-family:"Times New Roman";
        mso-ansi-language:#0400;
        mso-fareast-language:#0400;
        mso-bidi-language:#0400;}
</style>
<![endif]-->
</head>

<body lang=EN-US link=blue vlink=purple style='tab-interval:.5in'>

<div class=Section1>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>Hi, <o:p></o:p></span></font></p>

<p class=MsoNormal><span class=GramE><font size=4 face="Times New Roman"><span
style='font-size:14.0pt'>Just got a cert from our CA <span class=SpellE>EduCause</span>.</span></font></span><font
size=4><span style='font-size:14.0pt'><o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>I have never done this before, do don&#8217;t assume I know anything </span></font><font
size=4 face=Wingdings><span style='font-size:14.0pt;font-family:Wingdings;
mso-ascii-font-family:"Times New Roman";mso-hansi-font-family:"Times New Roman";
mso-char-type:symbol;mso-symbol-font-family:Wingdings'><span style='mso-char-type:
symbol;mso-symbol-font-family:Wingdings'>J</span></span></font><font size=4><span
style='font-size:14.0pt'><o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>How do I correctly create the <span class=SpellE>keystore</span> from
the cert?<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>I have <span class=SpellE>server.crt</span>, <span class=SpellE>server<span
class=GramE>,key</span></span> and <span class=SpellE>server.csr</span> file.<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>I also have a CA intermediate file with a <span class=SpellE>csr</span>
chain in it.<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>I tried to build the <span class=SpellE>idp.jks</span> file, but when I
try to use it I get <span class=SpellE>ssl</span> errors.<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>What did I miss doing or do wrong?<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>Oct 28, 2011 3:58:10 PM org.apache.coyote.http11.Http11Protocol init<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>SEVERE: Error initializing endpoint<o:p></o:p></span></font></p>

<p class=MsoNormal><span class=SpellE><font size=4 face="Times New Roman"><span
style='font-size:14.0pt'>java.io.IOException</span></font></span><font size=4><span
style='font-size:14.0pt'>: <span class=SpellE>jsse.invalid_ssl_conf</span><o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=GramE>at</span> <span class=SpellE>org.apache.tomcat.util.net.jsse.JSSESocketFactory.checkConfig</span>(JSSESocketFactory.java:755)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=GramE>at</span> <span class=SpellE>org.apache.tomcat.util.net.jsse.JSSESocketFactory.init</span>(JSSESocketFactory.java:460)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=GramE>at</span> <span class=SpellE>org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket</span>(JSSESocketFactory.java:130)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=GramE>at</span> <span class=SpellE>org.apache.tomcat.util.net.JIoEndpoint.init</span>(JIoEndpoint.java:538)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=GramE>at</span>
org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:176)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=GramE>at</span> <span class=SpellE>org.apache.catalina.connector.Connector.initialize</span>(Connector.java:1007)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=GramE>at</span> <span class=SpellE>org.apache.catalina.core.StandardService.initialize</span>(StandardService.java:677)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=GramE>at</span> <span class=SpellE>org.apache.catalina.core.StandardServer.initialize</span>(StandardServer.java:795)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=GramE>at</span> <span class=SpellE>org.apache.catalina.startup.Catalina.load</span>(Catalina.java:540)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=GramE>at</span> <span class=SpellE>org.apache.catalina.startup.Catalina.load</span>(Catalina.java:560)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=GramE>at</span> sun.reflect.NativeMethodAccessorImpl.invoke0(Native
Method)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=GramE>at</span> <span class=SpellE>sun.reflect.NativeMethodAccessorImpl.invoke</span>(Unknown
Source)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=GramE>at</span> <span class=SpellE>sun.reflect.DelegatingMethodAccessorImpl.invoke</span>(Unknown
Source)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=GramE>at</span> <span class=SpellE>java.lang.reflect.Method.invoke</span>(Unknown
Source)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=GramE>at</span> <span class=SpellE>org.apache.catalina.startup.Bootstrap.load</span>(Bootstrap.java:261)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=GramE>at</span> <span class=SpellE>org.apache.catalina.startup.Bootstrap.main</span>(Bootstrap.java:413)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>Caused by: <span class=SpellE>javax.net.ssl.SSLException</span>: No
available certificate or key corresponds to the SSL cipher suites which are <span
class=SpellE>ena</span><o:p></o:p></span></font></p>

<p class=MsoNormal><span class=GramE><font size=4 face="Times New Roman"><span
style='font-size:14.0pt'>bled</span></font></span><font size=4><span
style='font-size:14.0pt'>.<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=GramE>at</span> com.sun.net.ssl.internal.ssl.SSLServerSocketImpl.checkEnabledSuites(Unknown
Source)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=GramE>at</span> <span class=SpellE>com.sun.net.ssl.internal.ssl.SSLServerSocketImpl.accept</span>(Unknown
Source)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span
class=GramE>at</span> <span class=SpellE>org.apache.tomcat.util.net.jsse.JSSESocketFactory.checkConfig</span>(JSSESocketFactory.java:751)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><span
style='mso-spacerun:yes'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>...
15 more<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal><st1:PersonName w:st="on"><em><i><font size=4
 face="Times New Roman"><span style='font-size:13.5pt;mso-no-proof:yes'>Leonard
 Kroll</span></font></i></em></st1:PersonName><i><font size=4 color=blue><span
style='font-size:13.5pt;color:blue;font-style:italic;mso-no-proof:yes'><br>
</span></font></i><em><i><font size=4 face="Times New Roman"><span
style='font-size:13.5pt;mso-no-proof:yes'>UNIX / GIS&nbsp;Administrator</span></font></i></em><i><font
size=4 color=blue><span style='font-size:13.5pt;color:blue;font-style:italic;
mso-no-proof:yes'><br>
</span></font><em><i><font face="Times New Roman"><span style='mso-no-proof:
yes'>Univ. <st1:State w:st="on">Massachusetts</st1:State> <st1:place w:st="on"><st1:City
 w:st="on">Boston</st1:City></st1:place></span></font></i></em><font
color=blue><span style='color:blue;mso-no-proof:yes'><br>
</span></font></i><span style='mso-no-proof:yes'><a href="mailto:at@umb.edu"><em><i><font
color=black face="Times New Roman"><span style='color:windowtext;text-decoration:
none;text-underline:none'>Leonard(dot)Kroll(at)umb.edu</span></font></i></em></a><br>
<em><i><font face="Times New Roman">Phone: 617-287-5048</font></i></em><i><font
color=blue><span style='color:blue;font-style:italic'><br>
</span></font><em><i><font face="Times New Roman">fax:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
617-287-5224</font></i></em></i></span><em><i><font color=blue
face="Times New Roman"><span style='color:blue'><o:p></o:p></span></font></i></em></p>

<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p>&nbsp;</o:p></span></font></p>

</div>

</body>

</html>