Unable to get SSL + Tomcat working correctly

Question

Hi All,
Issue: Enabled SSL on Tomcat. First HTTPS request to JSP works, all HTTPS requests to JSPs after the first request fail (sever not found - page cannot be displayed error). The error does not get logged in the log files. The same JSPs work fine with HTTP.
Background info:
1. Installed Tomcat 4.1.24
2. Installed J2sdk1.4.1_01 (includes JSSE)
3. Created a .keystore using keytool
With the default .keystore the HTTPS requests to JSPs work fine.
4. Imported the server cert (given by our internal security folks) using
keytool -alias key skey - import -file server.crt.der
Upon accessing the JSPs using HTTPS. I am getting an error: Could'nt find trusted certs.
5. I also imported the CA cert into .keystore using
keytool -alias cakey -import -file ca.crt.der - trustcacerts
I still get the error: Couldnt find trusted certs.
Could any one please help me figure out why I am getting this error.
NOTE: I had to convert the certs (given by our internal security folks) from pkcs12 format to x509 and I had used Openssl 0.9.6g for that.
Thank you,
-Bala

Answer 1

Okay, my post did not fully qualify why
I suggested explicitly locating your keystore
file.
The tomcat source uses:
private String keystoreFile =
System.getProperty("user.home") + File.separator + ".keystore";
to identify the location of the keystore file.
A simple java program that echo's the user.home property will
tell you exactly where tomcat is looking for the keystore. Often
it is easier to explicitly locate the keystore file so you can
run the tomcat process from your developer user and you know
exactly which keystore you're using.
If you look at the SSLServerSocketFactory code in the tomcat/catalina
source you can see how it derives the values for parameters it
uses to configure the SSL socket.
-Steve