title: How renew ssl certificate on Tomcat?
body: <p>Following the go-daddy documentation :</p>
  
  <p><a href="https://www.godaddy.com/help/tomcat-4x5x6x-renew-a-certificate-5355" rel="nofollow noreferrer">https://www.godaddy.com/help/tomcat-4x5x6x-renew-a-certificate-5355</a></p>
  
  <p>The flow:</p>
  
  <p>I've create myDomain.csr and send it to GoDaddy , got reply from them with 3 files <code>( gd_bundle-g2-g1.crt , gdig2.crt.pem ,59a41eaec32d2046.crt)</code></p>
  
  <p>I mentioned that the old cert which was expired has a chain structure  , unfortunately Go-daddy give me  only "flat" certificates.</p>
  
  <p>I tried to make a chain by myself :</p>
  
  <pre><code>cat 59a41eaec32d2046.crt gd_bundle-g2-g1.crt gdig2.crt.pem &gt;&gt; myDomain.crt
  </code></pre>
  
  <p>after that :</p>
  
  <pre><code>sudo keytool -import -alias tomcat -keystore tomcat.keystore -trustcacerts -file myDomain.crt  
  sudo keytool -import -alias intermed -keystore tomcat.keystore -trustcacerts -file gdig2.crt
  sudo keytool -import -alias root -keystore tomcat.keystore -trustcacerts -file gd_bundle-g2-g1.crt
  </code></pre>
  
  <p>and change the server.xml exactly as in the documentation</p>
  
  <p>I Attach pictures of how in my opinion it should appear <a href="https://i.stack.imgur.com/nXH6f.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/nXH6f.png" alt="enter image description here"></a></p>
  
  <p>But Actually after my chain I had :
  <a href="https://i.stack.imgur.com/WjLlR.jpg" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/WjLlR.jpg" alt="enter image description here"></a></p>
  
  <p>When I open the Browser GOT:</p>
  
  <pre><code>Secure Connection Failed
  
  An error occurred during a connection to talenttribe.me. Cannot communicate securely with peer: no common encryption algorithm(s). Error code: SSL_ERROR_NO_CYPHER_OVERLAP
  
      The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
      Please contact the website owners to inform them of this problem.
  
  Learn more…
  
  Report errors like this to help Mozilla identify and block malicious sites
  </code></pre>
  
  <p>Don't understand what I'm missing...is it Chain creation or tomcat issues ??</p>
  
  <p>BR,</p>