title: How to install SSL Certs for tomcat keystore
body: <p>I am trying to setup SSL for tomcat. Following the below linked instructions, I ran the command:</p>
  
  <pre><code>keytool -genkey -alias alias_name -keyalg RSA -keystore keystore_name -keysize 2048
  </code></pre>
  
  <p>Instructions: <a href="https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&amp;actp=CROSSLINK&amp;id=AR227" rel="nofollow">https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&amp;actp=CROSSLINK&amp;id=AR227</a></p>
  
  <p>That generated the tomcat.keystore file. I generated the csr file using the above instructions as well and used it to request a SSL certificate from godaddy. They generated the .crt files and I downloaded them. I then tried to import them using:</p>
  
  <p><a href="http://www.sslshopper.com/tomcat-ssl-installation-instructions.html" rel="nofollow">http://www.sslshopper.com/tomcat-ssl-installation-instructions.html</a></p>
  
  <pre><code>keytool -import -trustcacerts -alias (root/intermediate/tomcat) -file (root.crt, intermediate.crt, primary.crt) -keystore tomcat.keystore
  </code></pre>
  
  <p>I notice in the ssl installation instructions they specify "-keystore keystore.key", as opposed to the "tomcat.keystore" file I specify. Where do I get the .key file or will the .keystore file work the same? I import the .crt files, but the ssl cert doesn't get updated. It still shows as an unverified cert that expires in 3 months opposed to the 2 years that the godaddy ssl cert is valid for. Any ideas on why the imports would not work properly? The server is running CentOS 6.5 and Tomcat version 7.0.50 if that has any bearing.</p>