Hi Boris,

Here is my keytool coomand line:

keytool -genkey -keyalg rsa -keystore myks.ks

However, the certificate may not be the problem; it was just a shot in
the dark, so I will explain my JBoss/Tomcat settings too in case you
have a problem there. The documentation for JBoss is quite shocking so
it wouldn't surprise me!

1. In the file %JBOSS_HOME%\server\default\conf\jboss-service.xml I
have an mbean entry as follows:

<mbean code="org.jboss.security.plugins.JaasSecurityDomain"
name="Security:service=JaasSecurityDomain,domain=TomcatSSL">
    <depends>jboss.security:service=JaasSecurityManager</depends>
    <constructor>
         <arg type="java.lang.String" value="TomcatSSL" />
    </constructor>
    <attribute name="KeyStoreURL">file://C:\myks.ks</attribute>
    <attribute name="KeyStorePass">myPassword</attribute>
</mbean>

2. In the file
%JBOSS_HOME%\server\default\deploy\jbossweb-tomcat41.sar\META-INF\jboss-service.xml:
Find the HTTP/1.1 connector. The connector has a number of attributes.
I have added a new attribute called redirectPort and given it a value
of 8443. E.g. redirectPort="8443".

3. Underneath that connector in the same file I created a new
connector for port 8443 as follows:

<Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
  port="8443" minProcessors="5" maxProcessors="75"
  enableLookups="false"
  acceptCount="100" debug="0" scheme="https" secure="true"
  useURIValidationHack="false" disableUploadTimeout="true">
  <Factory
className="org.apache.coyote.tomcat4.CoyoteServerSocketFactory"
           keystoreFile="C:\myks.ks" keystorePass="myPassword"
           clientAuth="false" protocol="TLS" />
</Connector>

Please note: this is for configuring HTTPS only, not RMI SSL.

HTH,

Duncan Eley
duncan.eleyREM@VEbcs.org.uk