How can I create keystore from an existing certificate abc crt and abc key files

Question

I am trying to import a certificate and a key file into the keystore but I m unable to do that   How can I create a keystore by importing both an existing certificate  abc crt  and abc key files

User · Answer

You must use OpenSSL and keytool   OpenSSL for CER  amp  PVK file   P12     openssl pkcs12 -export -name servercert -in selfsignedcert crt -inkey serverprivatekey key -out myp12keystore p12   Keytool for p12   JKS     keytool -importkeystore -destkeystore mykeystore jks -srckeystore myp12keystore p12 -srcstoretype pkcs12 -alias servercert

User · Answer

In addition to  Bruno s answer  you need to supply the -name for alias  otherwise Tomcat will throw Alias name tomcat does not identify a key entry error  Sample Command  openssl pkcs12 -export -in localhost crt -inkey localhost key -out localhost p12 -name localhost

User · Answer

Adding to  MK Yung and  Bruno s answer   Do enter a password for the destination keystore  I saw my console hanging when I entered the command without a password    openssl pkcs12 -export -in abc crt -inkey abc key -out abc p12 -name localhost  -passout pass changeit

User · Answer

If the keystore is for tomcat then  after creating the keystore with the above answers  you must add a final step to create the  tomcat  alias for the key   keytool -changealias -alias  1  -destalias  tomcat  -keystore keystore-file jks   You can check the result with   keytool -list -keystore keystore-file jks -v

User · Answer

The easiest is probably to create a PKCS 12 file using OpenSSL   openssl pkcs12 -export -in abc crt -inkey abc key -out abc p12   You should be able to use the resulting file directly using the PKCS12 keystore type   If you really need to  you can convert it to JKS using keytool -importkeystore  available in keytool from Java 6    keytool -importkeystore -srckeystore abc p12           -srcstoretype PKCS12           -destkeystore abc jks           -deststoretype JKS

[ssl] How can I create keystore from an existing certificate (abc.crt) and abc.key files?

Examples related to ssl

Examples related to keytool