Using KeyStore Explorer to work with Certificates with CA Web Viewer 12.1

Products

• Output Management Web Viewer

Issue/Introduction

 Assist needed with creating a certificate for the Server to use TLS 1.2 for a HTTPS connection from the browser

Environment

Release : 12.1

Component : CA OUTPUT MANAGEMENT WEB VIEWER FOR ALL PLATFORMS

Cause

Significantly reduces the time and problems involved in doing it manually

Resolution

Keystore Explorer (https://keystore-explorer.org/) is a trusted open source GUI replacement for the Java command-line utilities.  The best feature is its automated import of the signed Certificates, and the ability to view/verify all aspects of the Keystore file.  It is not a requirement, but it does significantly reduce the time and problems involved in doing it manually. 

It does not create the initial certificate, about the only thing it does not do.  It allows full display, creation, changes, and analysis of a Java KeyStore file (.jks).  It imports the certificate information and formats it correctly, a process that can be difficult manually because there are 3 files to be imported and they must be in a particular order.  The KeyStore explorer puts them in the proper order automatically.

 

Additional Information

Here are a couple of links that we use for the process.  The manual command examples are shown.

http://tomcat.apache.org/tomcat-8.0-doc/ssl-howto.html

 

https://www.mulesoft.com/tcat/tomcat-ssl