Add Self Signed Certificate without promting Yes/No from User

Question

Using some batch file, I want to add the untrusted self signed certificate within Java Keystore.

Command is

%JAVA_HOME%/bin/keytool -import -v -trustcacerts -alias server-alias
-file server.cer -keystore cacerts.jks -keypass changeit -storepass changeit

After running above command, the screen promts for Trust of certificate using Y/N.

Trust this certificate? [no]:

But I don't want to provide Y/N here.

Is there a way to complete the import using a single command or some additional import switch if any?

^^ Personally, I would consider a succinct answer on here preferable to wading through documentation. Perhaps the original questioner read the docs and missed it.. — ticktockhouse, Aug 09 '17 at 16:06

score 235 · Accepted Answer · edited Mar 11 '20 at 13:57

235

The option -noprompt doesn't prompt the input Y/N from a user and assumes yes.

More details can found by running command keytool -importcert -help on terminal.

edited Mar 11 '20 at 13:57

Jacek Laskowski

answered Jul 09 '14 at 11:45

Arun Kumar

1

well correct, but the help is not very informative, it tells only "-noprompt: do not prompt" not telling what to prompt for. If the password is omitted it should fail, not prompt for password. – user1708042 May 09 '22 at 14:20

score 0 · Answer 2 · answered Jan 26 '20 at 19:57

0

As such, keytool is most likely looking for "yes" in your locale ("si" in this case).

answered Jan 26 '20 at 19:57

Carlos

2 Answers2