Tomcat server  Print this Article

Generating a Certificate Signing Request for Tomcat server

Step 1: Generate the Keystore and the Private Key (use JDK 1.3.1 or later).

Execute the following command:

Unix: $JAVA_HOME/bin/keytool -genkey -keysize 2048 -alias [your_alias_name] -keyalg RSA -keystore [your_keystore_filename]

It will prompt for the following X.509 attributes of the certificate:

Country Name (C) - two-letter code: PL
State or Province (S): Malopolska
Locality or City (L): Krakow
Organization (O) - name of company: You Ltd
Organizational Unit (OU) - optional department of organization unit making the request: IT
Common Name (CN) - the Host + Domain Name: YourDomain.com


Specify a password. The default value will be "changeit".

Step 2: Generate a CSR

Create CSR using the following command:

keytool -certreq -keyalg RSA -alias [your_alias_name] -file certreq.csr -keystore [your_keystore_filename]

Save your CSR file you will need it after ordering SSL certificate.

Was this answer helpful?

Related Articles

What is CSR and who needs it?
A Certificate Signing Request is a text generated on the server that is used to create your SSL...
Apache/OpenSSL
To generate a pair of private key and public Certificate Signing Request (CSR) for a webserver,...
Apache (with mod_ssl)
Installing SSL certificate on Apache with mod_ssl To install certificate you need 2...
Apache (Multi-Domain version)
To generate CSR file which includes more than one Fully Qualified Domain Name, you need to...
Apple Mac OS X Server
CSR is generated in 2 steps.I. Private key generation1. Log into server and open...