I am trying to determine the best way to import my wildcard SSL cert into ADSelfService Plus. Comodo sent me a bundle CA file and a domain crt file for my wildcard domain.
These are the options ADSelfService Plus gives me on the instruction page for adding the cert to the keystore:
For "Comodo" certificates
keytool -import -trustcacerts -alias root -file AddTrustExternalCARoot.crt -keystore selfservice.keystore
keytool -import -trustcacerts -alias addtrust -file UTNAddTrustServerCA.crt -keystore selfservice.keystore
keytool -import -trustcacerts -alias ComodoUTNServer -file ComodoUTNServerCA.crt -keystore selfservice.keystore
keytool -import -trustcacerts -alias essentialSSL -file essentialSSLCA.crt -keystore selfservice.keystore
I tried importing my domain.crt using the essentialSSL option but that did not nest the root and intermediate CA properly. I tried importing the bundle using the keytool -import -trustcacerts -alias root method and then importing the domain.crt. I then get a
ERR_SSL_VERSION_OR_CIPHER_MISMATCH from chrome. I tried various other combos as well to no avail.