Keytool is a key and certificate management utility which is used to manage Java Keystores. It is shipped with Java.
Questions tagged [keytool]
48 questions
1
vote
0 answers
How to import a certificate into my java cacerts file as a privateKeyEntry?
I'm trying to import a CA-signed certificate into my Java cacerts.
Now I've got these files:
signing request.csr
ca-signed certificate.crt
ca-signed ceertificate.key
ca.cer
ca root.cer
According to the test API document,I need to import my…
![](../../users/profiles/623170.webp)
little bird
- 11
- 1
1
vote
0 answers
Automatically Adding Client SSL Certificates to Java Keystore? Centos 6.10
I have been having an issue for months where all of the sudden our Java install on Centos 6.10 stopped adding client site certificates to the java keystore.
To work around this I need to browse to the clients website such as https://ws.example.com…
![](../../users/profiles/393743.webp)
Tom Ferlaak
- 11
- 2
1
vote
1 answer
convert cer to csr using openssl or keytool
Is it possible to generate a csr file from cer file using openssl or keytool? I can see commands to convert the other way.
Or, is it possible to generate a public pem file from the cer file?
![](../../users/profiles/567371.webp)
earl
- 111
- 1
- 2
0
votes
2 answers
Renewing SSL Certificate requires new CSR
I have a working Tomcat application on Centos which uses an SSL certificate which is due to expire soon.
I have created a CSR using keytool :
keytool -certreq -keyalg RSA -alias my_alias -keystore keystore.jks -file nov19.csr
Then pasted the CSR to…
![](../../users/profiles/548229.webp)
TonyV
- 3
- 1
0
votes
0 answers
Importing Mozilla's CACerts to JRE
I recently grabbed a copy of Mozilla's list of CA certs and I'm attempting to import to a new JRE I've downloaded.
List in question (in pem) can be found here: https://curl.haxx.se/docs/caextract.html
I have tried various ways of doing it, the most…
![](../../users/profiles/347990.webp)
akortex
- 131
- 2
0
votes
1 answer
Populating jks file with keys from 509 certificates
Does anyone have detailed, step by step, instructions for extracting encryption keys from 509 certificates, and then storing them inside an encrypted jks file?
![](../../users/profiles/21157.webp)
blueberryfields
- 757
- 1
- 7
- 17
0
votes
1 answer
How to create tomcat keystore from existing Godaddy .key and .crt file
I have existing SSL file for a domain which being used in Nginx and Apache.
How I can create tomcat keystore from existing GoDaddy .key and .crt file.
I tried below
keytool -import -alias tomcat -keystore k.key -file k.crt
I got below…
![](../../users/profiles/239955.webp)
Ramratan Gupta
- 127
- 1
- 11
0
votes
1 answer
How to hide the java keystore password in keytool scripts
As part of our project, we are pushing in the SSL certificates onto the rich clients which try to establish the connection with SSL based web servers through a windows batch script.
This script contains batch statements of the following…
![](../../users/profiles/422243.webp)
Pavan Dittakavi
- 123
- 7
0
votes
1 answer
WildFly with client certifactes: javax.net.ssl.SSLException: Received fatal alert: unknown_ca
I'm trying to install a wildfly9 server with client certificate authorization. To do that I have:
On the Client: Create a self signed certificate:
keytool -genkey -keystore client.keystore -validity 3650
-keyalg RSA -keysize 4096 -storetype…
![](../../users/profiles/145652.webp)
Steffen
- 929
- 3
- 13
- 28
0
votes
1 answer
Getting Certificates from Java Keystore
I used Java Keytool to generate domain.csr, domain.keystore and domain.cer. I need to secure the domain using SSL for which I need domain.crt and domain.key. How can I get these two? Are domain.jks and domain.keystore both same? What is difference…
![](../../users/profiles/381216.webp)
saurg
- 113
- 1
- 2
- 4
0
votes
1 answer
P7b file and cer file do I need them both
I'm trying to understand why I need the chain at all (p7b). I have imported certificates previously and I didn't need one. Can I bypass this somehow?
Well I am getting an error - keytool error: java.lang.Exception: Input not an X.509…
![](../../users/profiles/335337.webp)
uhhh_big_mike_boiii
- 111
- 6
0
votes
1 answer
Certificate bound to ip address
I've seen that there are similar questions, but none give a perfect answer to me.
I'm trying to set up two machines. One with LAMP and a platform (that works great) and it also handles the user db through LDAP.
On the other machine there is a portal…
![](../../users/profiles/260889.webp)
Joakim Hellström
- 77
- 1
- 11
0
votes
1 answer
How to install/update/upgrade SSL certificate in Tomcat
I am about to install/update/upgrade a SSL certificate in one of the servers which has the following configuration
Server information:
Sever version: Apache Tomcat/6.0.35
OS version: Linux 2.6.18-371.6.1.el5
Architecture: amd64
JVM version:…
![](../../users/profiles/241745.webp)
Yama
- 101
- 1
- 3
0
votes
1 answer
Can I use openssl to generate key/cert for tomcat?
According to http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html#Create_a_local_Certificate_Signing_Request_(CSR) I can use keytool to generate the key and cert for tomcat but can I use openssl?
If yes, is there any openssl guideline for…
user132206
0
votes
1 answer
multiple cert in a file?
I have a file which contains:
-----BEGIN CERTIFICATE-----
(many lines of 64 bytes)
-----END CERTIFICATE-----
I use keytool.exe -printcert -file (myfile)
it outputs like this
Certificate[1]:
Owner: CN=www.mydomain.xxxxxx
(bah bah…
user132206