How can I create keystore from an existing certificate abc crt and abc key files

Question

I am trying to import a certificate and a key file into the keystore but I m unable to do that   How can I create a keystore by importing both an existing certificate  abc crt  and abc key files

User · Answer

The easiest is probably to create a PKCS#12 file using OpenSSL:

openssl pkcs12 -export -in abc.crt -inkey abc.key -out abc.p12

You should be able to use the resulting file directly using the PKCS12 keystore type.

If you really need to, you can convert it to JKS using keytool -importkeystore (available in keytool from Java 6):

keytool -importkeystore -srckeystore abc.p12 \
        -srcstoretype PKCS12 \
        -destkeystore abc.jks \
        -deststoretype JKS

User · Answer

If the keystore is for tomcat then  after creating the keystore with the above answers  you must add a final step to create the  tomcat  alias for the key   keytool -changealias -alias  1  -destalias  tomcat  -keystore keystore-file jks   You can check the result with   keytool -list -keystore keystore-file jks -v

User · Answer

You must use OpenSSL and keytool   OpenSSL for CER  amp  PVK file   P12     openssl pkcs12 -export -name servercert -in selfsignedcert crt -inkey serverprivatekey key -out myp12keystore p12   Keytool for p12   JKS     keytool -importkeystore -destkeystore mykeystore jks -srckeystore myp12keystore p12 -srcstoretype pkcs12 -alias servercert

User · Answer

In addition to  Bruno s answer  you need to supply the -name for alias  otherwise Tomcat will throw Alias name tomcat does not identify a key entry error  Sample Command  openssl pkcs12 -export -in localhost crt -inkey localhost key -out localhost p12 -name localhost

User · Answer

Adding to  MK Yung and  Bruno s answer   Do enter a password for the destination keystore  I saw my console hanging when I entered the command without a password    openssl pkcs12 -export -in abc crt -inkey abc key -out abc p12 -name localhost  -passout pass changeit

[ssl] How can I create keystore from an existing certificate (abc.crt) and abc.key files?

Examples related to ssl

Examples related to keytool