I have a wildcard certificate from digicert and I need to install this together with an intermediate certificate. But I can not find the proper way to configure the Java connector in such a way that the intermediate certificate is returned to the connecting client. Could you tell me what I should do? When I connect using OpenSSL i see the following error:
Verify return code: 21 (unable to verify the first certificate)
My connector config:
<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
maxHttpHeaderSize="8192" SSLEnabled="true"
maxThreads="150" minSpareThreads="25"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" useBodyEncodingForURI="true"
keyAlias="internalcert" keystoreFile="/home/httpd/Jira/application-data/jira/jira.jks" keystorePass="password" keystoreType="JKS" />
I have also tried the following connector:
<Connector port="8443"
maxHttpHeaderSize="8192"
maxThreads="150"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
SSLEnabled="true"
SSLCertificateFile="/home/httpd/Jira/application-data/jira/wildcard.internal.betterbe.com.crt"
SSLCertificateKeyFile="/home/httpd/Jira/application-data/jira/wildcard.internal.betterbe.com.key"
SSLCertificateChainFile="/home/httpd/Jira/application-data/jira/ThawteTLSRSACAG1.pem"
/>
when I do this, the connector doesn't even start at all. Jira does start though, so it seems like an issue in tomcat.
Everywhere else where I use this certificate with the intermediate I can configure it and it works fine. Just not in Jira.
Thanks
jan Hugo Prins.