I did the following:
- -created a request (CSR) at the TomCat install.
- -bought a certificate at GoDaddy (I know, I know... client request).
- -submitted the CSR.
- -received the certificate back.
At this point, all I had to do was install the intermediate and then install the certificate reply to the CSR. TomCat says no.... chain not valid.
I tried many intermediate and root certficates in the GD repository but the final certificate would not install.
https://certs.godaddy.com/repository
Nothing worked for me at this point.
Here is how to fix:
- -uninstall any certificate intermediate or root that I installed.
- -open the certificate from GD in Windows.
- -click the tab for the Certificate Path (at the top).
- -click the intermediate certificate (the one in the middle).
- -click VIEW-CERTIFICATE > DETAILS > COPY-TO-FILE
- -click BASE-64-ENCODED-X-509
Now combine them:
- -open the certificate from GD in a text editor.
- -open the certificate from Intermediate in a text editor.
- -copy and past the intermediate certificate directly below the GD certificate, like so:
-----BEGIN CERTIFICATE-----
MIICajCCAdOgAwIBAgIBAjANBgkqhkiG9w0BAQUFADA7MQswCQYDVQQGEwJVSzEa ....
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIICkjCCAfugAwIBAgIJAKm5bDEMxZd7MA0GCSqGSIb3DQEBBQUAMDsxCzAJBgNV ....
-----END CERTIFICATE----- - -save the certificate.
- -install the certificate in TomCat.