在Tomcat中安装更新的SSL证书

Question

I successfully installed a GoDaddy SSL certificate in Tomcat last year.

When the certificate expired, I renewed it. I did this without generating a new keystore or CSR. GoDaddy delivered three files to me, gd_bundle.crt, gd_intermediate.crt, and a third .crt file with a random number as the name.

I don't know what to do next. I assume I have to incorporate these files into my existing keystore. GoDaddy provides this help page: http://support.godaddy.com/help/article/5355/ssl-certificate-renewal-tomcat-4-x5-x6-x

The page says I can do this one of two ways. I tried the first way and all I got was an error message saying "-inkey: no such file or directory". I tried the second way, but I do not have any file with the name it references, and also any attempt to import the new certs into the existing keystore results in an error "certificate not imported, alias already exists".

What is the correct way to update my keystore file with the new certificate?

Thanks.

Answer 1

您需要使用密钥工具，通过-importcert选项，使用已使用的别名将编号文件导入现有的密钥库中。