Hi,
what I did:
1. import CA into {instance}/config/cacerts.jks
2. import certificate signed with previous CA into {instance}/config/keystore.jks
3. change cert alias in administration console for http-listener-2
4. restart server
It works in glassfish 3.2.1 and it doesn't work in glassfish 4
thanks