The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [keytool]

Keytool is a key and certificate management utility which is used to manage Java Keystores. It is shipped with Java.

Filter by
Sorted by
Tagged with
0
votes
0answers
15 views

Importing Mozilla's CACerts to JRE

I recently grabbed a copy of Mozilla's list of CA certs and I'm attempting to import to a new JRE I've downloaded. List in question (in pem) can be found here: https://curl.haxx.se/docs/caextract....
-3
votes
1answer
297 views

Failed to set Up SSL on Tomcat 9 on AWS EC2

I am following this guide to setup ssl on my Tomcat 9 hosted on AWS EC2 (Ubuntu 16.04.5 LTS). Version: java-8-oracle , apache-tomcat-9.0.10 Key created at /home/ubuntu : ubuntu@ip-x-x-x-x:~$ sudo ...
1
vote
1answer
3k views

ERR_SSL_VERSION_OR_CIPHER_MISMATCH with signed certificate in Tomcat

I have a tomcat server for which I needed a signed certificate. I generated a key using keytool -genkey .... and then generated a CSR and sent it to my company admin. They gave me back a CER ...
0
votes
1answer
2k views

How to create tomcat keystore from existing Godaddy .key and .crt file

I have existing SSL file for a domain which being used in Nginx and Apache. How I can create tomcat keystore from existing GoDaddy .key and .crt file. I tried below keytool -import -alias tomcat -...
0
votes
1answer
680 views

How to hide the java keystore password in keytool scripts

As part of our project, we are pushing in the SSL certificates onto the rich clients which try to establish the connection with SSL based web servers through a windows batch script. This script ...
1
vote
1answer
256 views

openssl and keytool conflict in PEM

I have created a self-signed certificate in nginx server in ubuntu as below: sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/nginx-selfsigned.key -out /etc/ssl/certs/...
1
vote
0answers
39 views

Keystore + CSR created on dev system does not work on remote (AWS) Tomcat

I am facing very odd situation. I have created keystore + CSR using keytool command in my local/dev machine. I got the SSL certificate from https://www.thawte.com/. I have successfully imported cert ...
0
votes
1answer
2k views

WildFly with client certifactes: javax.net.ssl.SSLException: Received fatal alert: unknown_ca

I'm trying to install a wildfly9 server with client certificate authorization. To do that I have: On the Client: Create a self signed certificate: keytool -genkey -keystore client.keystore -validity ...
1
vote
1answer
1k views

How do I setup a Letsencrypt ssl on Xeams mail server?

First, I was able to successfully setup a letsencrypt certificate on an Ubuntu 14.0.4 server for my domain, and I confirmed everything was okay, by verifying I could access my domain via https and ...
0
votes
1answer
4k views

Getting Certificates from Java Keystore

I used Java Keytool to generate domain.csr, domain.keystore and domain.cer. I need to secure the domain using SSL for which I need domain.crt and domain.key. How can I get these two? Are domain.jks ...
2
votes
1answer
5k views

Tomcat 8.5.4 SSL configuration troubles

The version details : Using CATALINA_BASE: /apps/TOMCAT/tomcat Using CATALINA_HOME: /apps/TOMCAT/tomcat Using CATALINA_TMPDIR: /apps/TOMCAT/tomcat/temp Using JRE_HOME: /usr Using CLASSPATH:...
2
votes
1answer
461 views

How to use your ssl certificate and key from your website with activemq console?

After enforcing strict transport security in a server, it is also forcing https into port 8161 for activemq which of course makes it fail. I followed this instructions to enable https on activemq ...
0
votes
1answer
1k views

P7b file and cer file do I need them both

I'm trying to understand why I need the chain at all (p7b). I have imported certificates previously and I didn't need one. Can I bypass this somehow? Well I am getting an error - keytool error: ...
2
votes
0answers
445 views

sign keytool generated cert/key pairs using easy-rsa openvpn intermediate CA

I am creating root and intermediate CA with easy-rsa using ./build-ca & ./build-inter commands consecutively. Now, I want my root ca as offline and I want my certs/keys signed by intermediate CA. ...
9
votes
3answers
33k views

How to generate new, 2048-bit Diffie-Hellman parameters with Java keytool?

We are non-experts trying - unsuccessfully so far - to update our web server (JBoss-5.1.0.GA) settings to meet Diffie-Hellman standards. After running a test on https://weakdh.org/sysadmin.html, we ...
19
votes
3answers
100k views

How to generate .key and .crt file from JKS file for httpd apache server

I have the mycert.jks file only. Now i need to extract and generate .key and .crt file and use it in apache httpd server. SSLCertificateFile /usr/local/apache2/conf/ssl.crt/server.crt ...
0
votes
1answer
401 views

Certificate bound to ip address

I've seen that there are similar questions, but none give a perfect answer to me. I'm trying to set up two machines. One with LAMP and a platform (that works great) and it also handles the user db ...
1
vote
1answer
3k views

Can I import an SSL certificate that was created by the CA into my Java keystore?

I'm trying to import a CA-signed certificate into a Java keystore. All the instructions I can find for this tell me to first create a keystore and a signing request (CSR) using the Java keytool, then ...
1
vote
1answer
258 views

Configuring dovecot and postfix ssl setting by jks file

I have CA JKS (Java Keystore) file which the CA bundle was added to it completely and we don't have any problem with java stuffs. Now how may I export/manipulate, keys and required stuffs for setting ...
1
vote
0answers
621 views

SSL error, unable to find valid certification path to requested target

I'm new to ssl so forgive me. I set up a site with ssl and all the online checks (eg. https://ssltools.websecurity.symantec.com/checker/views/certCheck.jsp) show that it is set up correctly and the ...
1
vote
1answer
3k views

Unable to convert JKS keystore to Oracle Wallet using orapki

I have generated jks keystore using keytool and using the jks keystore I have csr. The same csr I have sent to Signing authority. The Signing authority have given the trusted certificates(root,...
0
votes
1answer
2k views

How to install/update/upgrade SSL certificate in Tomcat

I am about to install/update/upgrade a SSL certificate in one of the servers which has the following configuration Sever information: Sever version: Apache Tomcat/6.0.35 OS version: Linux 2.6.18-371....
5
votes
3answers
16k views

Extract key from JKS keystore to use with apache2 and tomcat

I have a keystore in JKS format and I want to use that with apache2. How can I export the key and the certificates (that i already chained) out the JKS in a easy way? I found many answers out there ...
12
votes
1answer
24k views

Unable to generate certificate with Subject Alternate Name using Java 1.7 keytool utility

I'm having an issue generating a keypair with subject alternate name using the Java keytool utility from Java 1.7. I'm attempting to follow the instructions found here. An example of the command I'm ...
2
votes
1answer
3k views

Generate SSL certificate using Keytool

I have a question about SSL certificates. I use Openssl to generate the certificate: I followed this tutorial. My goal is to generate: .crt .key .pem Is possible to obtain the same files using ...
1
vote
1answer
550 views

Generate a certificate with Openssl and import the same certificate using keytool

I have a question about the SSL during the use of CAS in LIferay. I have generate the certificate using Openssl (I flollowed this tutorial) on my CAS Server and now I would to import the certificate ...
0
votes
1answer
1k views

Can I use openssl to generate key/cert for tomcat?

According to http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html#Create_a_local_Certificate_Signing_Request_(CSR) I can use keytool to generate the key and cert for tomcat but can I use openssl? ...
0
votes
1answer
1k views

multiple cert in a file?

I have a file which contains: -----BEGIN CERTIFICATE----- (many lines of 64 bytes) -----END CERTIFICATE----- I use keytool.exe -printcert -file (myfile) it outputs like this Certificate[1]: ...
1
vote
0answers
490 views

Create jks for tomcat using .key ,.ca and .cert file

I have three file sample.cert, sample.CA,sample.key provided by Verisign. I need to create keystore for tomcat. As I searched I cannot use .key file directly to create keystore. The command I used ...
4
votes
3answers
21k views

Keytool ServerAlternateName

I'm trying to get the certificates just right for our Jira/Confluence deployments in house. People access them differently, either from the hostname or the FQDN. I'm using Java 7's keytool so I have ...
1
vote
2answers
2k views

how to install ssl on tomcat 7?

I know this question might sound too easy and I should had read all docs available on internet, the true is that I did, and I had no luck, its kinda confusing for me, I have installed many times this ...
1
vote
1answer
3k views

Installing SSL Thawte Certificates for tomcat from pre-generated Private Key

I have received a Bunch of SSL certificates that i need to install into tomcat servers, and normally this is easy enough. However, these certificates have had their private keys generated elsewhere ...
1
vote
1answer
7k views

SSL connection issue with s_client

I'm trying to configure SSL on two machines (on LAN) from a local CA I created and am hitting an issue when testing with s_client, I can't seem to locate helpful info w/ my google-fu skills. I'm ...
1
vote
1answer
2k views

How to include chain.cer in a keystore file?

I would like to create a keystore file with a certificate and a chain.cer file. # openssl pkcs12 -export -chain -CAfile chain.cer -in example.cer -inkey example.key -out keystore.jks -name tomcat -...
1
vote
2answers
2k views

New Key for expired certificate?

I need to create a new certificate for an internal server. It is self signed. Is there an easy way to just extend the expiration date of the current certificate? If not, can I reuse the current key,...
2
votes
1answer
16k views

Keytool import certificate fails “Public keys in reply and keystore don't match”

I'm importing a SSL certificate to use in Tomcat in my keystore using keytool and it fails with "Public keys in reply and keystore don't match" Problem might be declared by the fact that I created a ...
3
votes
1answer
3k views

Enable SSL with Jetty 8

I received certificates from GoDaddy an I'm trying to enable SSL with Jetty but receive an error 107 SSL protocol error when connecting to https://server.com:8443 I generated the keystore using these ...
1
vote
0answers
2k views

Extract cert and private key from JKS keystore to use it in Apache2 httpd

I tried to find this but no luck. I created a JKS keystore and generated a CSR, then imported the signed cert and intermediate and root CA certs. Used this keystore on Tomcat without problems. Now I ...
12
votes
1answer
26k views

Copy a Java keystore on one machine to another?

I have a keystore on one machine (at /root/.keystore) and I want to move it to another machine at the same location. Currently, the second machine doesn't have a keystore at /root/.keystore, is there ...
3
votes
1answer
4k views

Can't import SSL key using keytool

I have a problem with keytool tool. I have a FishEye/Crucible server which needed to be connected to my Jira server. My Jira server uses SSL. I'm trying to import ssl certificate using the following ...
7
votes
3answers
8k views

Is there anywhere that I can get a valid , signed, SSL cert to the “localhost” domain for testing?

Is there anywhere that I can get a valid , signed, SSL cert to the "localhost" domain for testing? Does anyone anywhere offer a download of something like this that I can use in testing? I know ...
-1
votes
2answers
197 views

KEYTOOL equivalent in apache

what is the equivalent command for keytool add in apache/php
0
votes
1answer
655 views

Populating jks file with keys from 509 certificates

Does anyone have detailed, step by step, instructions for extracting encryption keys from 509 certificates, and then storing them inside an encrypted jks file?