Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [keytool]

Keytool is a key and certificate management utility which is used to manage Java Keystores. It is shipped with Java.

49 questions
1
vote
2 answers

New Key for expired certificate?

I need to create a new certificate for an internal server. It is self signed. Is there an easy way to just extend the expiration date of the current certificate? If not, can I reuse the current key, or do I need to generate a new one? I'll be…
aglassman
  • 210
  • 2
  • 8
1
vote
0 answers

How to import a certificate into my java cacerts file as a privateKeyEntry?

I'm trying to import a CA-signed certificate into my Java cacerts. Now I've got these files: signing request.csr ca-signed certificate.crt ca-signed ceertificate.key ca.cer ca root.cer According to the test API document，I need to import my…
little bird
  • 11
  • 2
1
vote
0 answers

Automatically Adding Client SSL Certificates to Java Keystore? Centos 6.10

I have been having an issue for months where all of the sudden our Java install on Centos 6.10 stopped adding client site certificates to the java keystore. To work around this I need to browse to the clients website such as https://ws.example.com…
Tom Ferlaak
  • 11
  • 2
1
vote
1 answer

convert cer to csr using openssl or keytool

Is it possible to generate a csr file from cer file using openssl or keytool? I can see commands to convert the other way. Or, is it possible to generate a public pem file from the cer file?
earl
  • 111
  • 1
  • 2
0
votes
2 answers

Renewing SSL Certificate requires new CSR

I have a working Tomcat application on Centos which uses an SSL certificate which is due to expire soon. I have created a CSR using keytool : keytool -certreq -keyalg RSA -alias my_alias -keystore keystore.jks -file nov19.csr Then pasted the CSR to…
TonyV
  • 3
  • 1
0
votes
0 answers

Importing Mozilla's CACerts to JRE

I recently grabbed a copy of Mozilla's list of CA certs and I'm attempting to import to a new JRE I've downloaded. List in question (in pem) can be found here: https://curl.haxx.se/docs/caextract.html I have tried various ways of doing it, the most…
akortex
  • 131
  • 2
0
votes
1 answer

Populating jks file with keys from 509 certificates

Does anyone have detailed, step by step, instructions for extracting encryption keys from 509 certificates, and then storing them inside an encrypted jks file?
blueberryfields
  • 757
  • 1
  • 7
  • 17
0
votes
1 answer

How to create tomcat keystore from existing Godaddy .key and .crt file

I have existing SSL file for a domain which being used in Nginx and Apache. How I can create tomcat keystore from existing GoDaddy .key and .crt file. I tried below keytool -import -alias tomcat -keystore k.key -file k.crt I got below…
Ramratan Gupta
  • 127
  • 1
  • 12
0
votes
1 answer

How to hide the java keystore password in keytool scripts

As part of our project, we are pushing in the SSL certificates onto the rich clients which try to establish the connection with SSL based web servers through a windows batch script. This script contains batch statements of the following…
Pavan Dittakavi
  • 123
  • 7
0
votes
1 answer

Getting Certificates from Java Keystore

I used Java Keytool to generate domain.csr, domain.keystore and domain.cer. I need to secure the domain using SSL for which I need domain.crt and domain.key. How can I get these two? Are domain.jks and domain.keystore both same? What is difference…
saurg
  • 113
  • 1
  • 2
  • 4
0
votes
1 answer

P7b file and cer file do I need them both

I'm trying to understand why I need the chain at all (p7b). I have imported certificates previously and I didn't need one. Can I bypass this somehow? Well I am getting an error - keytool error: java.lang.Exception: Input not an X.509…
uhhh_big_mike_boiii
  • 111
  • 1
  • 6
0
votes
1 answer

Certificate bound to ip address

I've seen that there are similar questions, but none give a perfect answer to me. I'm trying to set up two machines. One with LAMP and a platform (that works great) and it also handles the user db through LDAP. On the other machine there is a portal…
Joakim Hellström
  • 77
  • 1
  • 11
0
votes
1 answer

How to install/update/upgrade SSL certificate in Tomcat

I am about to install/update/upgrade a SSL certificate in one of the servers which has the following configuration Server information: Sever version: Apache Tomcat/6.0.35 OS version: Linux 2.6.18-371.6.1.el5 Architecture: amd64 JVM version:…
Yama
  • 101
  • 1
  • 3
0
votes
1 answer

Can I use openssl to generate key/cert for tomcat?

According to http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html#Create_a_local_Certificate_Signing_Request_(CSR) I can use keytool to generate the key and cert for tomcat but can I use openssl? If yes, is there any openssl guideline for…
user132206
0
votes
1 answer

multiple cert in a file?

I have a file which contains: -----BEGIN CERTIFICATE----- (many lines of 64 bytes) -----END CERTIFICATE----- I use keytool.exe -printcert -file (myfile) it outputs like this Certificate[1]: Owner: CN=www.mydomain.xxxxxx (bah bah…
user132206
1 2
3
4