Tomcat server

Generating a Certificate Signing Request for Tomcat server

Step 1: Generate the Keystore and the Private Key (use JDK 1.3.1 or later).

Execute the following command:
Unix: $JAVA_HOME/bin/keytool -genkey -keysize 2048 -alias [your_alias_name] -keyalg RSA -keystore [your_keystore_filename]
It will prompt for the following X.509 attributes of the certificate:

Country Name (C) - two-letter code: PL
State or Province (S): Malopolska
Locality or City (L): Krakow
Organization (O) - name of company: You Ltd
Organizational Unit (OU) - optional department of organization unit making the request: IT
Common Name (CN) - the Host + Domain Name: YourDomain.com

Specify a password. The default value will be "changeit".

Step 2: Generate a CSR

Create CSR using the following command:
keytool -certreq -keyalg RSA -alias [your_alias_name] -file certreq.csr -keystore [your_keystore_filename]
Save your CSR file you will need it after ordering SSL certificate.