I am trying to add a wildcard certificate to our new installation of ADSelfService and am running into trouble. I am running the following command:
keytool -import -alias SelfService -trustcacerts -keystore SelfService.keystore -file myCertFile.p7b
After entering the password, I am greeted with this error:
keytool error: java.lang.Exception: Input not an X.509 certificate
This is a 2048-bit key. Does Tomcat/ADSSP support this key size?
Thank you for your assistance.
--------
update on 9 July 2013
After doing some reading around the Internet and on this forum, I learned that importing a p7b file will not work. It was suggested to export all of the certs in that file to X.509 CER files. I have imported all of the .cer files into my SelfService keystore, copied the file to .\config, restarted the service, and still no luck. Right now via the browser, I am seeing my wildcard being issued by itself, not by DigiCert.
What am I missing?