Digicert certificates installation

[rmarques1991]

Hello,

Our company has been using Alfresco with self signed certificates for a couple of years and now we acquired TERENA certificates with Digicert root.

How do we go around installing them? I have already updated the ssl.keystore in ALFRESCO-HOME/keystore directory and I did nothing to the ssl.truststore in the same directory as I think that is only used for Solr.

Now, the certificate seems to be correctly integrated with tomcat because it is now recognized as signed by a proper registered CA, but the search tags in the repository cannot be loaded.

I think there is a problem with Alfresco - Solr authentication.

One more thing: I have renamed ssl.repo.client.keystore and ssl.repo.client.truststore wherever they appeared to make them irrelevant to the installation, restarted alfresco and the tags could still be retrieved, so these are not being used for anything.

Any help?

[rmarques1991]

More information:

I think that to have everything working I just need to add the root certificate of digicert to the truststore.

I have a *.der file and a *.pem file with the chain of certificates (three of them). How do I go around importing only the root?

I tried

keytool -import -file chain.der -alias dms_new -keystore ssl_test.truststore -storepass kT9X6oe68t

And it only imports the top certificate. What am I doing wrong?