title: Tomcat SSL certificate authority invalid
body: <p>Tried asking before but wasn't too good at it so heres attempt two</p>
  
  <p>I'm trying to get SSL running on a tomcat 7 server under RHEL. Sever works fine under HTTP but when I try to access it with HTTPS, I get this error. </p>
  
  <p><a href="https://i.stack.imgur.com/pP7Er.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/pP7Er.png" alt="enter image description here"></a></p>
  
  <p>looking into it further, chrome tells me this</p>
  
  <p><a href="https://i.stack.imgur.com/j5hBO.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/j5hBO.png" alt="enter image description here"></a></p>
  
  <p>did some research. Added the certs to /etc/pki/ca-trust/source/anchors, update-ca-trust, still the same problem. tried rebuilding the keystore from scratch and changing up the order in which they were imported, still nothing. </p>
  
  <p>Heres whats currently in my keystore:</p>
  
  <pre><code>root, Dec 29, 2017, trustedCertEntry,
  
  tomcat, Dec 29, 2017, PrivateKeyEntry,
  
  intermed, Dec 29, 2017, trustedCertEntry,
  
  crm2.mydomain.org, Jan 3, 2018, trustedCertEntry,
  </code></pre>
  
  <p>and whats in my server.xml</p>
  
  <pre><code>&lt;Connector
         port="443" maxThreads="200"
         scheme="https" secure="true" SSLEnabled="true"
         keystoreFile="/opt/apache-tomcat-7.0.82/conf/store" keystorePass=[pass]
         clientAuth="false" sslProtocol="TLS"/&gt;
  </code></pre>
  
  <p>Other info: </p>
  
  <p>Certs obtained from godaddy.
  Used guide for installation <a href="https://www.godaddy.com/help/tomcat-generate-csrs-and-install-certificates-5239" rel="nofollow noreferrer">here</a></p>
  
  <p>godddy ssl checker says I'm missing the intermediate certificate </p>
  
  <p>Tomcat version 7</p>
  
  <p>RHEL 7.4</p>
  
  <p>java 1.8</p>
  
  <p>any help is appreciated </p>