ssl certificate in namecheap.com help me please(solved)

[beaver944]

Are you aware that different browsers have their own sets of trusted CAs, and that if your CA is not chained to one of the pre-installed ones, you manually have to tell your browser to start trusting it (verifying fingerprints yourself)?

I bought an SSL certificate from Comodo, i must have no error with the web browser

[beaver944]

I have 3 files at namecheap.com alias Comodo:

AddTrustExternalCARoot.crt PositiveSSLCA2.crt t411-wiki_me.crt

[beaver944]

I solved my problem, I use a proxy apache .

https://t411-wiki.me/subsonic/

[Aethies]

I am using the standalone version of subsonic on Ubuntu server.
This is what I did to install the cert:

There are four commands that needed to be run.

1. Combine the certs together into one file (there are multiple ways to do this, I chose the easiest way in linux)

Code: Select all

cat private.crt servercert.crt intermediate.crt > echo subsonic.crt

2. Convert the cert from PEM to PKCS12 so java can use it.

Code: Select all

openssl pkcs12 -in subsonic.crt -export -out subsonic.pkcs12

3. Create Java keystore

Code: Select all

keytool -importkeystore -srckeystore subsonic.pkcs12 -deskeystore subsonic.keystore -srcstoretype PKCS12 -srcalias 1 -destalias tomcat

4. Import the keystore into the jar file

Code: Select all

zip /var/subsonic/standalone/subsonic-booter-jar-with-dependencies.jar subsonic.keystore

Start subsonic and you should be good to go!

One very important thing to note: When asked for a password for the keystore or keys, use subsonic as the password. Any other password used and it will fail on starting subsonic.

[beaver944]

Hello

Thank you very much it works very well Aethies .

[aweber1nj]

Has anyone tried these steps with 4.8?

I have tried a number of permutations of this, but it does not pick-up my SSL Certificate. After restart, I browse to the subsonic app and the certificate still shows the subsonic.org one.

Any other ideas?

-AJ

[aweber1nj]

This was my fault.

Best thing to do is copy the keystore to the same directory where your jar is, then run the zip there (or probably the OP works, but you can't specify). Basically, what happened to me is adding a path (relative or otherwise) in front of the keystore makes zip add that relative path into the JAR -- so the keystore does not replace the subsonic/default one.

If you see "adding..." (incorrect) in response to your zip command in the OP instead of "updating..." (correct), then you need to correct it; it will not work.

Sorry for any confusion, but maybe this will help someone else.

-AJ