Questions tagged [keytool]

Keytool is a key and certificate management utility which is used to manage Java Keystores. It is shipped with Java.

Filter by
Sorted by
Tagged with
1 vote
0 answers
676 views

How to import a certificate into my java cacerts file as a privateKeyEntry?

I'm trying to import a CA-signed certificate into my Java cacerts. Now I've got these files: signing request.csr ca-signed certificate.crt ca-signed ceertificate.key ca.cer ca root.cer According to ...
1 vote
0 answers
197 views

Automatically Adding Client SSL Certificates to Java Keystore? Centos 6.10

I have been having an issue for months where all of the sudden our Java install on Centos 6.10 stopped adding client site certificates to the java keystore. To work around this I need to browse to the ...
0 votes
1 answer
121 views

Does deleting a keystore alias result in the CSR being useless

I've created a new keystore with the keytool command and had given an alias of tomcat. I generated the CSR for sending to the CA to issue a certificate. In the meantime, we've deleted the alias named ...
  • 1
1 vote
1 answer
6k views

convert cer to csr using openssl or keytool

Is it possible to generate a csr file from cer file using openssl or keytool? I can see commands to convert the other way. Or, is it possible to generate a public pem file from the cer file?
  • 111
0 votes
2 answers
379 views

Renewing SSL Certificate requires new CSR

I have a working Tomcat application on Centos which uses an SSL certificate which is due to expire soon. I have created a CSR using keytool : keytool -certreq -keyalg RSA -alias my_alias -keystore ...
  • 3
0 votes
0 answers
67 views

Importing Mozilla's CACerts to JRE

I recently grabbed a copy of Mozilla's list of CA certs and I'm attempting to import to a new JRE I've downloaded. List in question (in pem) can be found here: https://curl.haxx.se/docs/caextract....
  • 131
-3 votes
1 answer
1k views

Failed to set Up SSL on Tomcat 9 on AWS EC2

I am following this guide to setup ssl on my Tomcat 9 hosted on AWS EC2 (Ubuntu 16.04.5 LTS). Version: java-8-oracle , apache-tomcat-9.0.10 Key created at /home/ubuntu : ubuntu@ip-x-x-x-x:~$ sudo ...
  • 101
2 votes
2 answers
9k views

ERR_SSL_VERSION_OR_CIPHER_MISMATCH with signed certificate in Tomcat

I have a tomcat server for which I needed a signed certificate. I generated a key using keytool -genkey .... and then generated a CSR and sent it to my company admin. They gave me back a CER ...
  • 245
0 votes
1 answer
5k views

How to create tomcat keystore from existing Godaddy .key and .crt file

I have existing SSL file for a domain which being used in Nginx and Apache. How I can create tomcat keystore from existing GoDaddy .key and .crt file. I tried below keytool -import -alias tomcat -...
0 votes
1 answer
1k views

How to hide the java keystore password in keytool scripts

As part of our project, we are pushing in the SSL certificates onto the rich clients which try to establish the connection with SSL based web servers through a windows batch script. This script ...
1 vote
1 answer
422 views

openssl and keytool conflict in PEM

I have created a self-signed certificate in nginx server in ubuntu as below: sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/nginx-selfsigned.key -out /etc/ssl/certs/...
  • 243
1 vote
0 answers
43 views

Keystore + CSR created on dev system does not work on remote (AWS) Tomcat

I am facing very odd situation. I have created keystore + CSR using keytool command in my local/dev machine. I got the SSL certificate from https://www.thawte.com/. I have successfully imported cert ...
1 vote
1 answer
2k views

WildFly with client certifactes: javax.net.ssl.SSLException: Received fatal alert: unknown_ca

I'm trying to install a wildfly9 server with client certificate authorization. To do that I have: On the Client: Create a self signed certificate: keytool -genkey -keystore client.keystore -validity ...
  • 949
1 vote
1 answer
1k views

How do I setup a Letsencrypt ssl on Xeams mail server?

First, I was able to successfully setup a letsencrypt certificate on an Ubuntu 14.0.4 server for my domain, and I confirmed everything was okay, by verifying I could access my domain via https and ...
0 votes
1 answer
6k views

Getting Certificates from Java Keystore

I used Java Keytool to generate domain.csr, domain.keystore and domain.cer. I need to secure the domain using SSL for which I need domain.crt and domain.key. How can I get these two? Are domain.jks ...
  • 113
2 votes
1 answer
7k views

Tomcat 8.5.4 SSL configuration troubles

The version details : Using CATALINA_BASE: /apps/TOMCAT/tomcat Using CATALINA_HOME: /apps/TOMCAT/tomcat Using CATALINA_TMPDIR: /apps/TOMCAT/tomcat/temp Using JRE_HOME: /usr Using CLASSPATH:...
2 votes
1 answer
1k views

How to use your ssl certificate and key from your website with activemq console?

After enforcing strict transport security in a server, it is also forcing https into port 8161 for activemq which of course makes it fail. I followed this instructions to enable https on activemq ...
  • 839
0 votes
1 answer
2k views

P7b file and cer file do I need them both

I'm trying to understand why I need the chain at all (p7b). I have imported certificates previously and I didn't need one. Can I bypass this somehow? Well I am getting an error - keytool error: ...
2 votes
0 answers
632 views

sign keytool generated cert/key pairs using easy-rsa openvpn intermediate CA

I am creating root and intermediate CA with easy-rsa using ./build-ca & ./build-inter commands consecutively. Now, I want my root ca as offline and I want my certs/keys signed by intermediate CA. ...
12 votes
3 answers
42k views

How to generate new, 2048-bit Diffie-Hellman parameters with Java keytool?

We are non-experts trying - unsuccessfully so far - to update our web server (JBoss-5.1.0.GA) settings to meet Diffie-Hellman standards. After running a test on https://weakdh.org/sysadmin.html, we ...
33 votes
4 answers
226k views

How to generate .key and .crt file from JKS file for httpd apache server

I have the mycert.jks file only. Now i need to extract and generate .key and .crt file and use it in apache httpd server. SSLCertificateFile /usr/local/apache2/conf/ssl.crt/server.crt ...
  • 739
0 votes
1 answer
1k views

Certificate bound to ip address

I've seen that there are similar questions, but none give a perfect answer to me. I'm trying to set up two machines. One with LAMP and a platform (that works great) and it also handles the user db ...
1 vote
1 answer
4k views

Can I import an SSL certificate that was created by the CA into my Java keystore?

I'm trying to import a CA-signed certificate into a Java keystore. All the instructions I can find for this tell me to first create a keystore and a signing request (CSR) using the Java keytool, then ...
  • 143
1 vote
1 answer
442 views

Configuring dovecot and postfix ssl setting by jks file

I have CA JKS (Java Keystore) file which the CA bundle was added to it completely and we don't have any problem with java stuffs. Now how may I export/manipulate, keys and required stuffs for setting ...
  • 13
1 vote
0 answers
665 views

SSL error, unable to find valid certification path to requested target

I'm new to ssl so forgive me. I set up a site with ssl and all the online checks (eg. https://ssltools.websecurity.symantec.com/checker/views/certCheck.jsp) show that it is set up correctly and the ...
1 vote
1 answer
5k views

Unable to convert JKS keystore to Oracle Wallet using orapki

I have generated jks keystore using keytool and using the jks keystore I have csr. The same csr I have sent to Signing authority. The Signing authority have given the trusted certificates(root,...
0 votes
1 answer
3k views

How to install/update/upgrade SSL certificate in Tomcat

I am about to install/update/upgrade a SSL certificate in one of the servers which has the following configuration Server information: Sever version: Apache Tomcat/6.0.35 OS version: Linux 2.6.18-371....
  • 101
6 votes
3 answers
22k views

Extract key from JKS keystore to use with apache2 and tomcat

I have a keystore in JKS format and I want to use that with apache2. How can I export the key and the certificates (that i already chained) out the JKS in a easy way? I found many answers out there ...
  • 183
14 votes
1 answer
30k views

Unable to generate certificate with Subject Alternate Name using Java 1.7 keytool utility

I'm having an issue generating a keypair with subject alternate name using the Java keytool utility from Java 1.7. I'm attempting to follow the instructions found here. An example of the command I'm ...
  • 243
2 votes
1 answer
3k views

Generate SSL certificate using Keytool

I have a question about SSL certificates. I use Openssl to generate the certificate: I followed this tutorial. My goal is to generate: .crt .key .pem Is possible to obtain the same files using ...
  • 155
1 vote
1 answer
628 views

Generate a certificate with Openssl and import the same certificate using keytool

I have a question about the SSL during the use of CAS in LIferay. I have generate the certificate using Openssl (I flollowed this tutorial) on my CAS Server and now I would to import the certificate ...
  • 155
0 votes
1 answer
2k views

Can I use openssl to generate key/cert for tomcat?

According to http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html#Create_a_local_Certificate_Signing_Request_(CSR) I can use keytool to generate the key and cert for tomcat but can I use openssl? ...
user avatar
0 votes
1 answer
3k views

multiple cert in a file?

I have a file which contains: -----BEGIN CERTIFICATE----- (many lines of 64 bytes) -----END CERTIFICATE----- I use keytool.exe -printcert -file (myfile) it outputs like this Certificate[1]: ...
user avatar
1 vote
0 answers
604 views

Create jks for tomcat using .key ,.ca and .cert file

I have three file sample.cert, sample.CA,sample.key provided by Verisign. I need to create keystore for tomcat. As I searched I cannot use .key file directly to create keystore. The command I used ...
10 votes
4 answers
43k views

Keytool SubjectAlternativeName

I'm trying to get the certificates just right for our Jira/Confluence deployments in house. People access them differently, either from the hostname or the FQDN. I'm using Java 7's keytool so I have ...
  • 183
1 vote
2 answers
3k views

how to install ssl on tomcat 7?

I know this question might sound too easy and I should had read all docs available on internet, the true is that I did, and I had no luck, its kinda confusing for me, I have installed many times this ...
1 vote
1 answer
3k views

Installing SSL Thawte Certificates for tomcat from pre-generated Private Key

I have received a Bunch of SSL certificates that i need to install into tomcat servers, and normally this is easy enough. However, these certificates have had their private keys generated elsewhere ...
  • 113
1 vote
1 answer
7k views

SSL connection issue with s_client

I'm trying to configure SSL on two machines (on LAN) from a local CA I created and am hitting an issue when testing with s_client, I can't seem to locate helpful info w/ my google-fu skills. I'm ...
  • 111
1 vote
1 answer
2k views

How to include chain.cer in a keystore file?

I would like to create a keystore file with a certificate and a chain.cer file. # openssl pkcs12 -export -chain -CAfile chain.cer -in example.cer -inkey example.key -out keystore.jks -name tomcat -...
  • 10k
1 vote
2 answers
2k views

New Key for expired certificate?

I need to create a new certificate for an internal server. It is self signed. Is there an easy way to just extend the expiration date of the current certificate? If not, can I reuse the current key,...
  • 210
2 votes
1 answer
22k views

Keytool import certificate fails "Public keys in reply and keystore don't match"

I'm importing a SSL certificate to use in Tomcat in my keystore using keytool and it fails with "Public keys in reply and keystore don't match" Problem might be declared by the fact that I created a ...
  • 123
3 votes
1 answer
4k views

Enable SSL with Jetty 8

I received certificates from GoDaddy an I'm trying to enable SSL with Jetty but receive an error 107 SSL protocol error when connecting to https://server.com:8443 I generated the keystore using these ...
2 votes
0 answers
3k views

Extract cert and private key from JKS keystore to use it in Apache2 httpd

I tried to find this but no luck. I created a JKS keystore and generated a CSR, then imported the signed cert and intermediate and root CA certs. Used this keystore on Tomcat without problems. Now I ...
  • 121
14 votes
1 answer
36k views

Copy a Java keystore on one machine to another?

I have a keystore on one machine (at /root/.keystore) and I want to move it to another machine at the same location. Currently, the second machine doesn't have a keystore at /root/.keystore, is there ...
  • 247
5 votes
1 answer
7k views

Can't import SSL key using keytool

I have a problem with keytool tool. I have a FishEye/Crucible server which needed to be connected to my Jira server. My Jira server uses SSL. I'm trying to import ssl certificate using the following ...
  • 239
9 votes
3 answers
8k views

Is there anywhere that I can get a valid , signed, SSL cert to the "localhost" domain for testing?

Is there anywhere that I can get a valid , signed, SSL cert to the "localhost" domain for testing? Does anyone anywhere offer a download of something like this that I can use in testing? I know ...
  • 4,172
-1 votes
2 answers
370 views

KEYTOOL equivalent in apache

what is the equivalent command for keytool add in apache/php
user avatar
0 votes
1 answer
664 views

Populating jks file with keys from 509 certificates

Does anyone have detailed, step by step, instructions for extracting encryption keys from 509 certificates, and then storing them inside an encrypted jks file?