Problem with SSL certificate

[Josep Maria Pinyol]

Hello,

I'm following this guide:

https://confluence.atlassian.com/doc/running-confluence-over-ssl-or-https-161203.html

But when I'm try to import the SSL certificate (issued by gandi.net), I get this error:

keytool error: java.lang.Exception: Failed to establish chain from reply

In this document there is a tip with a possible solution using Verisign or GoDaddy certificates, but I don't understand how to apply this solution.

Any idea?

Thank you,

Josep Maria

[Alexis Robert · Accepted solution]

Hi @Josep Maria Pinyol , 

this usually means that there is an intermediate certificate missing from the certificate you're trying to import into the keystore. Can you find in your Gandi interface something like a "full chain" or "intermediate" certificate ? This is what you should then import into the keystore.

Let me know if this helps, 

--Alexis

[Josep Maria Pinyol]

Ok, finally I can import my certificate using these steps:

1. Import root certificate:

keytool -import -alias root -trustcacerts -file USERTrustRSACertificationAuthority.crt

2. Import intermediate certificate:

keytool -import -alias intermediate -trustcacerts -file GandiStandardSSLCA2.pem

3. And finally

keytool -import -alias tomcat -file <YOUR_CERTIFICATE.crt>

And works fine.

Thank you @Alexis Robert 

[André Costa]

.