Use Certificate Signing Request (CSR) to obtain an SSL certificate from a trusted Certificate Authority (CA).
You can generate a CSR, only after a newkeystore file is generated.
Generate a CSR:
<keytool dir>/keytool –certreq –file certreq.csr -alias tomcat -keystore newkeystoreAt the command prompt, type:
changeit
A new file with the name certreq.csr is created. You can use this file to generate an SSL certificate at a trusted CA.