Configuring Tomcat - SSL

#genera il certificato CA

openssl genrsa -out server_t.key 1024
openssl req -new -key server_t.key -out server_t.csr
openssl x509 -req -days 365 -in server_t.csr -signkey server_t.key -out server_t.crt

#genera il keystore e cert. server (tomcat.crt, CN=hostname.domainname)

keytool -genkey -alias tomcat -keyalg RSA -keystore tomcat.ks
keytool -keystore tomcat.ks -alias tomcat -certreq -file tomcat.csr

echo 02 > serial.txt

#sign cert. server

openssl x509 -CA server_t.crt -CAkey server_t.key -CAserial serial.txt -req -in tomcat.csr -out tomcat.crt -days 365

#importa il certificato server nel keystore

keytool -import -alias serverCA -file server_t.crt -keystore tomcat.ks
keytool -import -alias tomcat -file tomcat.crt -keystore tomcat.ks
keytool -list -v -keystore tomcat.ks