Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have three file sample.cert, sample.CA,sample.key provided by Verisign. I need to create keystore for tomcat. As I searched I cannot use .key file directly to create keystore.

The command I used is below :

 pkcs12 -export -in sample.cert -inkey sample.key  -CAfile sample.crt -out sample.p12

(I changed sample.CA to sample.crt.)

I use openssl to create sample.p12 file. Then I import sample.p12 to sample.jsk by using keytool.

    keytool -importkeystore -srckeystore sample.p12 -destkeystore sample.jks -srcstoretype pkcs12     

When I verify the certificate it shows Intermediate certificate chaining issue.

Any idea?

share|improve this question
I couldn't figure this out so I just installed the APR native library which adds support for openssl PEM/KEY files. It was easier in the end. – Nic Jun 14 '13 at 2:58

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.