Save OpenSSL VeriSign Certificate into Java Keystore
    I've made a certificate request using openssl and sent it to the VeriSign.
    Now I have three things:
    1) Certificate request created with openssl (req.pem)  
    2) Private key file (key.pem)  
    3) My VeriSign SSL certificate (cert.pem)  
    
    But I need to import all this stuff into java keystore to make it work with
    my tomcat application. So first I simple tried to follow instructions on
    https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&actp=CROSSLINK&id=AR234
    , but with this method my VeriSign
    certificate entry type isn't KeyEntry or PrivateKeyEntry (it's trustedCertEntry),
    so tomcat doesn't start saying "No available certificate or key corresponds
    to the SSL cipher suites which are enabled."

Then I tried to export VeriSign certificate and private into PKC12 store using openssl and then import this store into java keystore. And it seems to be ok: certificate enrty type is PrivateKeyEntry, tomcat starts and works and all Linux browsers (including FireFox) accept this certificates. But here is one problem: the Certificate chain length value is 1 instead of 4 and FireFox in Windows interpret this certificate as untrusted saying "unknown issuer".

What is the right way to make this work?
    
P.S. sorry for code block, but this site's parser makes me crazy
Save OpenSSL VeriSign Certificate into Java Keystore
===

    I've made a certificate request using openssl and sent it to the VeriSign.
    Now I have three things:
    1) Certificate request created with openssl (req.pem)  
    2) Private key file (key.pem)  
    3) My VeriSign SSL certificate (cert.pem)  
    
    But I need to import all this stuff into java keystore to make it work with
    my tomcat application. So first I simple tried to follow instructions on
    https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&actp=CROSSLINK&id=AR234
    , but with this method my VeriSign
    certificate entry type isn't KeyEntry or PrivateKeyEntry (it's trustedCertEntry),
    so tomcat doesn't start saying "No available certificate or key corresponds
    to the SSL cipher suites which are enabled."

Then I tried to export VeriSign certificate and private into PKC12 store using openssl and then import this store into java keystore. And it seems to be ok: certificate enrty type is PrivateKeyEntry, tomcat starts and works and all Linux browsers (including FireFox) accept this certificates. But here is one problem: the Certificate chain length value is 1 instead of 4 and FireFox in Windows interpret this certificate as untrusted saying "unknown issuer".

What is the right way to make this work?
    
P.S. sorry for code block, but this site's parser makes me crazy