Getting a new keystore/certificate working w/ existing appli

[dlastoria]

I recently changed the SSL certificate on our JBoss 3.2.0 server and now one of my pages hangs forever.

The steps I took were:

Created a new keystore
Obtained a certificate from Verisign
Imported the certificate to the keystore
Pointed the jbossweb-jetty.sar/jboss-service.xml to the new certificate:




443
20
200
120000
2000
/etc/webkeystore_new
mypassword
mypassword





I can access the website (Struts based order-entry system), but when I get to a certain page (that I assume uses SSL) it now hangs forever. If I point to the old keystore it works fine.

I am also trying to access this from a new URL. For example, the old certificate is for:

https://www.mystore.com/store/UserLogin.do

the new certificate will be for:

https://mystore.mycompany.com/store/UserLogin.do

I am really getting down to the wire here and any help at all would be greatly appreciated.

Thanks!!

[dlastoria]

Anyone?

[jonlee]

There could be a number of problems. The certificate name/owner should match the exact website name used. It is possible the browser gets stuck with validation of the certificate although usually you get a warning indicating the certificate details do not match the server specified in the URL.

For more detailed information, I would check the Jetty website (http://jetty.mortbay.org) and the Jetty mailing list for more help on the certificate installation. However, I have found the standard instructions for certificate installation to operate successfully.