Unable to import certificate to cacerts

Question

My requirement is to import a certificate for maven repositories into the global keystore.

The certificate file is named maven-cacert.cer .

I am using following command from C:\Program Files\Java\jdk1.6.0_20\bin\ from cmd

keytool -importcert -trustcacerts -alias c:\maven-cacert.cer -file c:\maven-cacert.cer.der -keystore $JAVA_HOME\jre\lib\security\cacerts

as maven-cacert.cer file is in C directory

after pressing enter it asked to put password and after giving password it is saying like

keytool error: java.io.FileNotFoundException: $JAVA_HOME\jre\lib\security\cacerts (The system cannot find the path specified

I also tried

   keytool -importcert -trustcacerts -alias c:\maven-cacert.cer -file c:\maven- cacert.cer.der -keystore \usr\java/jdk1.6.0_20/bin/java\jre\lib\security\cacerts

but getting same output

Please help what is going wrong with my command while cacerts file is inside $JAVA_HOME\jre\lib\security\ directory.

and what is the value of $JAVA_HOME? – Scary Wombat May 28 '14 at 06:02 — Scary Wombat, May 28 '14 at 06:02
C:\Program Files\Java\jdk1.6.0_20\ – Neha Shukla May 28 '14 at 06:04 — Neha Shukla, May 28 '14 at 06:04
Not on windows it ain't, see @Quincy's answer – Scary Wombat May 28 '14 at 06:06 — Scary Wombat, May 28 '14 at 06:06

Quincy · Accepted Answer · 2014-05-28T06:15:25.440

43

Try using "%JAVA_HOME%\jre\lib\security\cacerts"

edited May 28 '14 at 06:15

answered May 28 '14 at 06:04

Quincy

4,393
3
26
40

Now its not asking for password and giving keytool error: java.lang.RuntimeException: Usage error, Files\Java\jdk1.6.0_20\jre\lib\security\cacerts is not a legal command – Neha Shukla May 28 '14 at 06:08
4

try adding double quotes around it – Quincy May 28 '14 at 06:13

score 29 · Answer 2 · edited Apr 09 '20 at 17:03

29

If you are using OpenJDK then the path for cacerts will not be available in

"%JAVA_HOME%"/jre/lib/security/cacerts

it will be available in path

"%JAVA_HOME%"/lib/security/cacerts

edited Apr 09 '20 at 17:03

Matt Ke

3,599
12
30
49

answered Apr 09 '20 at 14:13

Raghav2650

311
3
5

Oleg Gryb · Answer 3 · 2014-05-28T06:29:41.807

8

keytool -importcert -trustcacerts -alias mycert -file c:\maven-cacert.cer.der -keystore "%JAVA_HOME%"\jre\lib\security\cacerts

You also had a problem with alias. It's a name, not a file. You need to quote the "%JAVA_HOME%", because it has a space inside.

edited May 28 '14 at 06:29

answered May 28 '14 at 06:18

Oleg Gryb

5,122
1
28
40

score 5 · Answer 4 · answered Nov 24 '15 at 05:18

Use Bellow command to import the certificate in cacerts

Run command prompt as Administrator
cd C:\Program Files\Java\jdk1.6.0_45\jre\bin
keytool -import -trustcacerts -file "certpath\certname.cer" -alias "cert_alias" -keystore "%JAVA_HOME%"/jre/lib/security/cacerts
To view certificate keytool -list -keystore "%JAVA_HOME%"/jre/lib/security/cacerts -alias cert_alias

score 2 · Answer 5 · edited May 07 '16 at 15:07

2

For some reason, I think JAVA_HOME was not defined for me. I just used the full path. Running from the Desktop folder, my full command is:

"C:\Program Files\Java\jre1.8.0_77\bin\keytool" -import -alias fiddlercert -file fiddlerRoot.cer -keystore "C:\Program Files\Java\jre1.8.0_77\lib\security\cacerts" -storepass changeit

edited May 07 '16 at 15:07

Mogsdad

44,709
21
151
275

answered May 07 '16 at 10:06

Henry

2,870
1
25
17

score 1 · Answer 6 · answered May 28 '14 at 06:17

1

What is your OS? If you are on Windows, can you try replacing $JAVA_HOME with %JAVA_HOME% and see how it goes?

Thanks, Anuj

answered May 28 '14 at 06:17

user3679345

26
2

From the question it's pretty obvious the OP is using a windows machine – Tim May 28 '14 at 07:03
Thank you guys. Being a new bee to this site, it helps to get directions from seniors like you. Will take care. – user3679345 May 29 '14 at 05:47
Double quotes around %JAVA_HOME worked for me. ```"%JAVA_HOME%"/lib/security/cacerts``` – Vibhor Dube Jan 04 '21 at 11:16

score 1 · Answer 7 · edited Sep 15 '21 at 11:58

1

I tried with following command in cmd of windows, it has worked finally:

"%JAVA_HOME%"\bin\keytool.exe -import -trustcacerts -alias *Certificate filename* -file *full path of certificate location ending with certificatename* -keystore "%JAVA_HOME%"\lib\security\cacerts

edited Sep 15 '21 at 11:58

buddemat

4,552
14
29
49

answered Sep 15 '21 at 11:33

Akshit Kumar

46
2

thanks this one was the only one that fixed the issue for me ! – FelipeM Jun 30 '23 at 15:05

Unable to import certificate to cacerts

7 Answers7