Questions tagged [keytool]
Keytool is a key and certificate management utility which is used to manage Java Keystores. It is shipped with Java.
49
questions
0
votes
1
answer
4k
views
How to install/update/upgrade SSL certificate in Tomcat
I am about to install/update/upgrade a SSL certificate in one of the servers which has the following configuration
Server information:
Sever version: Apache Tomcat/6.0.35
OS version: Linux 2.6.18-371....
1
vote
1
answer
7k
views
Unable to convert JKS keystore to Oracle Wallet using orapki
I have generated jks keystore using keytool and using the jks keystore I have csr. The same csr I have sent to Signing authority.
The Signing authority have given the trusted certificates(root,...
2
votes
1
answer
7k
views
Tomcat 8.5.4 SSL configuration troubles
The version details :
Using CATALINA_BASE: /apps/TOMCAT/tomcat
Using CATALINA_HOME: /apps/TOMCAT/tomcat
Using CATALINA_TMPDIR: /apps/TOMCAT/tomcat/temp
Using JRE_HOME: /usr
Using CLASSPATH:...
35
votes
4
answers
256k
views
How to generate .key and .crt file from JKS file for httpd apache server
I have the mycert.jks file only.
Now i need to extract and generate .key and .crt file and use it in apache httpd server.
SSLCertificateFile /usr/local/apache2/conf/ssl.crt/server.crt
...
1
vote
1
answer
982
views
keytool error: java.security.cert.CertificateParsingException: signed fields invalid
I have a X509 certificate pem file I got from Mongo Atlas. I'm trying to import it into the keystore like so:
keytool -importcert -file X509-cert.pem -alias myalias -keystore mykeystore.p12 -storetype ...
1
vote
1
answer
3k
views
WildFly with client certifactes: javax.net.ssl.SSLException: Received fatal alert: unknown_ca
I'm trying to install a wildfly9 server with client certificate authorization. To do that I have:
On the Client: Create a self signed certificate:
keytool -genkey -keystore client.keystore -validity ...
1
vote
2
answers
3k
views
how to install ssl on tomcat 7?
I know this question might sound too easy and I should had read all docs available on internet, the true is that I did, and I had no luck, its kinda confusing for me, I have installed many times this ...
0
votes
1
answer
2k
views
Can I use openssl to generate key/cert for tomcat?
According to http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html#Create_a_local_Certificate_Signing_Request_(CSR) I can use keytool to generate the key and cert for tomcat but can I use openssl?
...
12
votes
4
answers
49k
views
Keytool SubjectAlternativeName
I'm trying to get the certificates just right for our Jira/Confluence deployments in house. People access them differently, either from the hostname or the FQDN. I'm using Java 7's keytool so I have ...
1
vote
0
answers
2k
views
How to import a certificate into my java cacerts file as a privateKeyEntry?
I'm trying to import a CA-signed certificate into my Java cacerts.
Now I've got these files:
signing request.csr
ca-signed certificate.crt
ca-signed ceertificate.key
ca.cer
ca root.cer
According to ...
1
vote
1
answer
10k
views
convert cer to csr using openssl or keytool
Is it possible to generate a csr file from cer file using openssl or keytool? I can see commands to convert the other way.
Or, is it possible to generate a public pem file from the cer file?
1
vote
0
answers
276
views
Automatically Adding Client SSL Certificates to Java Keystore? Centos 6.10
I have been having an issue for months where all of the sudden our Java install on Centos 6.10 stopped adding client site certificates to the java keystore.
To work around this I need to browse to the ...
0
votes
1
answer
314
views
Does deleting a keystore alias result in the CSR being useless
I've created a new keystore with the keytool command and had given an alias of tomcat.
I generated the CSR for sending to the CA to issue a certificate.
In the meantime, we've deleted the alias named ...
2
votes
1
answer
23k
views
Keytool import certificate fails "Public keys in reply and keystore don't match"
I'm importing a SSL certificate to use in Tomcat in my keystore using keytool and it fails with "Public keys in reply and keystore don't match"
Problem might be declared by the fact that I created a ...
2
votes
2
answers
10k
views
ERR_SSL_VERSION_OR_CIPHER_MISMATCH with signed certificate in Tomcat
I have a tomcat server for which I needed a signed certificate. I generated a key using
keytool -genkey ....
and then generated a CSR and sent it to my company admin.
They gave me back a CER ...
0
votes
2
answers
653
views
Renewing SSL Certificate requires new CSR
I have a working Tomcat application on Centos which uses an SSL certificate which is due to expire soon.
I have created a CSR using keytool :
keytool -certreq -keyalg RSA -alias my_alias -keystore ...
0
votes
0
answers
102
views
Importing Mozilla's CACerts to JRE
I recently grabbed a copy of Mozilla's list of CA certs and I'm attempting to import to a new JRE I've downloaded.
List in question (in pem) can be found here: https://curl.haxx.se/docs/caextract....
9
votes
3
answers
9k
views
Is there anywhere that I can get a valid , signed, SSL cert to the "localhost" domain for testing?
Is there anywhere that I can get a valid , signed, SSL cert to the "localhost" domain for testing? Does anyone anywhere offer a download of something like this that I can use in testing? I know ...
-3
votes
1
answer
1k
views
Failed to set Up SSL on Tomcat 9 on AWS EC2
I am following this guide to setup ssl on my Tomcat 9 hosted on AWS EC2 (Ubuntu 16.04.5 LTS).
Version: java-8-oracle , apache-tomcat-9.0.10
Key created at /home/ubuntu :
ubuntu@ip-x-x-x-x:~$ sudo ...
0
votes
1
answer
6k
views
How to create tomcat keystore from existing Godaddy .key and .crt file
I have existing SSL file for a domain which being used in Nginx and Apache.
How I can create tomcat keystore from existing GoDaddy .key and .crt file.
I tried below
keytool -import -alias tomcat -...
6
votes
3
answers
24k
views
Extract key from JKS keystore to use with apache2 and tomcat
I have a keystore in JKS format and I want to use that with apache2.
How can I export the key and the certificates (that i already chained) out the JKS in a easy way?
I found many answers out there ...
0
votes
1
answer
1k
views
How to hide the java keystore password in keytool scripts
As part of our project, we are pushing in the SSL certificates onto the rich clients which try to establish the connection with SSL based web servers through a windows batch script.
This script ...
14
votes
1
answer
31k
views
Unable to generate certificate with Subject Alternate Name using Java 1.7 keytool utility
I'm having an issue generating a keypair with subject alternate name using the Java keytool utility from Java 1.7. I'm attempting to follow the instructions found here.
An example of the command I'm ...
1
vote
1
answer
516
views
openssl and keytool conflict in PEM
I have created a self-signed certificate in nginx server in ubuntu as below:
sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/nginx-selfsigned.key -out /etc/ssl/certs/...
2
votes
1
answer
1k
views
How to use your ssl certificate and key from your website with activemq console?
After enforcing strict transport security in a server, it is also forcing https into port 8161 for activemq which of course makes it fail.
I followed this instructions to enable https on activemq ...
1
vote
0
answers
48
views
Keystore + CSR created on dev system does not work on remote (AWS) Tomcat
I am facing very odd situation. I have created keystore + CSR using keytool command in my local/dev machine.
I got the SSL certificate from https://www.thawte.com/. I have successfully imported cert ...
1
vote
1
answer
2k
views
How do I setup a Letsencrypt ssl on Xeams mail server?
First, I was able to successfully setup a letsencrypt certificate on an Ubuntu 14.0.4 server for my domain, and I confirmed everything was okay, by verifying I could access my domain via https and ...
0
votes
1
answer
7k
views
Getting Certificates from Java Keystore
I used Java Keytool to generate domain.csr, domain.keystore and domain.cer. I need to secure the domain using SSL for which I need domain.crt and domain.key. How can I get these two? Are domain.jks ...
12
votes
3
answers
45k
views
How to generate new, 2048-bit Diffie-Hellman parameters with Java keytool?
We are non-experts trying - unsuccessfully so far - to update our web server (JBoss-5.1.0.GA) settings to meet Diffie-Hellman standards. After running a test on https://weakdh.org/sysadmin.html, we ...
0
votes
1
answer
3k
views
P7b file and cer file do I need them both
I'm trying to understand why I need the chain at all (p7b). I have imported certificates previously and I didn't need one. Can I bypass this somehow?
Well I am getting an error - keytool error: ...
2
votes
0
answers
755
views
sign keytool generated cert/key pairs using easy-rsa openvpn intermediate CA
I am creating root and intermediate CA with easy-rsa using ./build-ca & ./build-inter commands consecutively. Now, I want my root ca as offline and I want my certs/keys signed by intermediate CA. ...
0
votes
1
answer
2k
views
Certificate bound to ip address
I've seen that there are similar questions, but none give a perfect answer to me.
I'm trying to set up two machines. One with LAMP and a platform (that works great) and it also handles the user db ...
15
votes
1
answer
38k
views
Copy a Java keystore on one machine to another?
I have a keystore on one machine (at /root/.keystore) and I want to move it to another machine at the same location. Currently, the second machine doesn't have a keystore at /root/.keystore, is there ...
1
vote
1
answer
5k
views
Can I import an SSL certificate that was created by the CA into my Java keystore?
I'm trying to import a CA-signed certificate into a Java keystore. All the instructions I can find for this tell me to first create a keystore and a signing request (CSR) using the Java keytool, then ...
1
vote
1
answer
477
views
Configuring dovecot and postfix ssl setting by jks file
I have CA JKS (Java Keystore) file which the CA bundle was added to it completely and we don't have any problem with java stuffs.
Now how may I export/manipulate, keys and required stuffs for setting ...
-1
votes
2
answers
430
views
KEYTOOL equivalent in apache
what is the equivalent command for keytool add in apache/php
1
vote
0
answers
716
views
SSL error, unable to find valid certification path to requested target
I'm new to ssl so forgive me.
I set up a site with ssl and all the online checks (eg. https://ssltools.websecurity.symantec.com/checker/views/certCheck.jsp) show that it is set up correctly and the ...
1
vote
1
answer
667
views
Generate a certificate with Openssl and import the same certificate using keytool
I have a question about the SSL during the use of CAS in LIferay.
I have generate the certificate using Openssl (I flollowed this tutorial) on my CAS Server and now I would to import the certificate ...
1
vote
1
answer
7k
views
SSL connection issue with s_client
I'm trying to configure SSL on two machines (on LAN) from a local CA I created and am hitting an issue when testing with s_client, I can't seem to locate helpful info w/ my google-fu skills. I'm ...
2
votes
1
answer
4k
views
Generate SSL certificate using Keytool
I have a question about SSL certificates.
I use Openssl to generate the certificate: I followed this tutorial. My goal is to generate:
.crt
.key
.pem
Is possible to obtain the same files using ...
0
votes
1
answer
667
views
Populating jks file with keys from 509 certificates
Does anyone have detailed, step by step, instructions for extracting encryption keys from 509 certificates, and then storing them inside an encrypted jks file?
0
votes
1
answer
3k
views
multiple cert in a file?
I have a file which contains:
-----BEGIN CERTIFICATE-----
(many lines of 64 bytes)
-----END CERTIFICATE-----
I use keytool.exe -printcert -file (myfile)
it outputs like this
Certificate[1]:
...
1
vote
0
answers
649
views
Create jks for tomcat using .key ,.ca and .cert file
I have three file sample.cert, sample.CA,sample.key provided by Verisign. I need to create keystore for tomcat. As I searched I cannot use .key file directly to create keystore.
The command I used ...
3
votes
1
answer
4k
views
Enable SSL with Jetty 8
I received certificates from GoDaddy an I'm trying to enable SSL with Jetty but receive an error 107 SSL protocol error when connecting to https://server.com:8443
I generated the keystore using these ...
1
vote
1
answer
3k
views
Installing SSL Thawte Certificates for tomcat from pre-generated Private Key
I have received a Bunch of SSL certificates that i need to install into tomcat servers, and normally this is easy enough. However, these certificates have had their private keys generated elsewhere ...
1
vote
1
answer
3k
views
How to include chain.cer in a keystore file?
I would like to create a keystore file with a certificate and a chain.cer file.
# openssl pkcs12 -export -chain -CAfile chain.cer -in example.cer -inkey example.key -out keystore.jks -name tomcat -...
1
vote
2
answers
2k
views
New Key for expired certificate?
I need to create a new certificate for an internal server. It is self signed. Is there an easy way to just extend the expiration date of the current certificate? If not, can I reuse the current key,...
2
votes
0
answers
4k
views
Extract cert and private key from JKS keystore to use it in Apache2 httpd
I tried to find this but no luck. I created a JKS keystore and generated a CSR, then imported the signed cert and intermediate and root CA certs. Used this keystore on Tomcat without problems.
Now I ...
5
votes
1
answer
8k
views
Can't import SSL key using keytool
I have a problem with keytool tool.
I have a FishEye/Crucible server which needed to be connected to my Jira server. My Jira server uses SSL. I'm trying to import ssl certificate using the following ...