I got the certificate signed and will proceed to import into keystore with below command. If you are playing around, then you may consider using a FREE certificate provider else go for a premium one.

This will create a CSR which you need to send to the certificate authority to get it signed. keytool -certreq -alias bloggerflare -keyalg RSA -file bloggerflare.csr -keystore bloggerflare.jks

Next would be to generate a new CSR with the newly created keystore with below command. Once you provide all the information, it will create a keystore file on a present working directory. It’s not your name but the domain name which you want to secure. Pay attention to the first and last name question. Is CN=, OU=Blogging, O=Geek Flare, L=Unknown, ST=Unknown, C=Unknown correct? What is the two-letter country code for this unit? What is the name of your State or Province? What is the name of your City or Locality? What is the name of your organizational unit? Filename – again, it’s good to keep the domain name.Įx: ssl]# keytool -genkey -alias bloggerflare -keyalg RSA -keysize 2048 -keystore bloggerflare.jks.Alias – better to keep it meaningful so in future you can quickly recognize.There is two variable in above commands which you may want to change. Keytool -genkey -alias domainname -keyalg RSA -keysize 2048 -keystore filename.jks We will use keytool utility to manage the certificates. The first step would be to generate a CSR and get that signed by the certificate authority. Let’s start… Preparing for SSL/TLS Certificate Generate CSR (Certificate signing request).However, if you are not using any of the above or using this as a front-end or need to deploy SSL directly in Tomcat, then the following will help you. Use web servers like Apache, Nginx, etc.You can terminate SSL at a load balancer.

One of the essential tasks for securing Tomcat is to configure SSL certificate, so web application is accessible over HTTPS. A step-by-step guide to set up SSL/TLS certificate in Tomcat server.

Apache tomcat 8 tls support