title: How to implement ssl in tomcat using CRT and PEM file (SSL_ERROR_NO_CYPHER_OVERLAP)
body: <p>I received ssl files from vendor - 2 crt files and one pem file. Can some one give steps how to implement ssl using these files in Tomcat 7 ?</p>
  
  <p>I implemented below steps to store ssl files into keystore</p>
  
  <pre><code>keytool -import -alias root -keystore tomcat.jks -trustcacerts -file tomcat.pem 
  keytool -import -alias comodo1 -keystore tomcat.jks -trustcacerts -file root.crt
  keytool -import -alias comodo2 -keystore tomcat.jks -trustcacerts -file int.crt
  </code></pre>
  
  <p>configured below lines in Tomcat</p>
  
  <pre><code>&lt;Connector port="443" protocol="HTTP/1.1"
  SSLEnabled="true"
  scheme="https" secure="true" clientAuth="false"
  sslProtocol="TLS" keystoreFile="/opt/tomcat.jks"
  keystorePass="password"/&gt;
  </code></pre>
  
  <p>also try to replace above protocol with <strong>org.apache.coyote.http11.Http11NioProtocol</strong> but still it didn't work on browser i got below error message. can some one help me on this.</p>
  
  <pre><code>An error occurred during a connection to XXXX:8443. Cannot communicate securely with peer: no common encryption algorithm(s). Error code: SSL_ERROR_NO_CYPHER_OVERLAP
  </code></pre>