TLS offloading
Apache Tomcat
Generate key pair on the CryptoHub by using Java Keytool
3min
with apache tomcat secure connections, you need to store a server private key and certificate in the java keystore saved on the {{ch}} this server certificate is presented to clients when connecting to the tomcat server this section uses java keytool to generate a new key pair on the {{ch}} , which you can use later to sign a jar file by using the java jarsigner utility the jdk installation includes the keytool application, so you can run the keytool commands in this section with no additional configuration generate a key pair on the {{ch}} execute the following command keytool genkeypair keyalg ec alias tomcatdemo1 keystore none storetype pkcs11 providerclass sun security pkcs11 sunpkcs11 providername sunpkcs11 futurex after execution, the keytool application prompts for information about the key pair to be generated enter the keystore password when prompted for the keystore password in this command, enter the {{ch}} identity password configured inside the \<crypto opr pass> tag in the fxpkcs11 cfg file 1\ what is your first and last name? \<br> \[unknown] www example com 2\ what is the name of your organizational unit? \<br> \[unknown] engineering 3\ what is the name of your organization? \<br> \[unknown] futurex 4\ what is the name of your city or locality? \<br> \[unknown] bulverde 5\ what is the name of your state or province? \<br> \[unknown] tx 6\ what is the two letter country code for this unit? \<br> \[unknown] us 7\ is cn=www example com, ou=engineering, o=futurex, l=bulverde, st=tx, c=us correct? \<br> \[no] yes