keytool: put your SSL key into a new keystore

1. openssl pkcs12 -export -in mycert.crt -inkey mykey.key -out myp12blob.p12 -name mykeystorealias -CAfile mycascert.crt
1. Set the password to "changeit"
2. keytool -importkeystore -deststorepass changeit -destkeypass changeit -destkeystore mykeystore -srckeystore myp12blob.p12 -srcstoretype PKCS12 -srcstorepass changeit -alias myalias
3. keytool -list -v -keystore mykeystore

Taken: https://confluence.atlassian.com/display/DOC/Running+Confluence+Over+SSL+or+HTTPS

Generate IAM certs for users on AWS

1. openssl genrsa 1024 > username-env-pk.pem
1. pk stands for private key
2. openssl req -new -x509 -nodes -sha1 -days 365 -key username-env-pk.pem -outform PEM > username-env-cert.pem
1. lasts for 365
3. Paste username-env-cert.pem in to the AWS Signing Certificates area for that user
4. Give user both username-env-pk.pem and username-env-cert.pem, and wish them luck