title: Apache tomcat: Importing already existing certificates into keystore
body: <p>I am trying to configure SSL for our server. Now, I have made sure that the that the crt files password is the same as the keystore(.jks password). However, whenever I import the crt file either as alias tomcat or root(only one of them I can use as there is just one crt file), I get <code>ssl_error_no_cypher_overlap</code>. </p>
  
  <p>I am not able to find any guide to import one certificate which will not complain that it's a self-signed certificate and no <code>ssl_error_no_cypher_overlap</code> error for one certificate. </p>
  
  <p>These are the files I have 
  <code>domainname.ca-bundle</code>, <code>.crt</code>, <code>.csr</code>, <code>.key</code>, <code>.p12</code>, <code>domainname.jks</code>, </p>
  
  <p>THis is the command I gave :</p>
  
  <pre><code>keytool -import -trustcacerts -alias root -file domainname.crt -keyalg RSA -keystore domainaname.jks
  </code></pre>
  
  <p>Connector :</p>
  
  <pre><code> &lt;Connector port="443" protocol="HTTP/1.1" SSLEnabled="true" maxThreads="200" compression="force"
                compressionMinSize="1024" scheme="https" secure="true" clientAuth="false" sslEnabledProtocols="TLSv1.2,TLSv1.1,TLSv1" sslProtocol="TLS" URIEncoding="utf-8"
   compressableMimeType="text/html,text/xml,text/plain,text/css,text/ javascript,application/x-javascript,application/javascript"
                 keystoreFile="domain.jks" keystorePass="pass" /&gt;
  </code></pre>
  
  <p>Any help would be nice. Thanks a lot. </p>