Digital Certificate How to import cer file in to truststore file using

Question

Has anyone came across where they have to deal with  truststore file  and knowing how to import  cer into  truststore file    I am not sure if I have to use Java Keytool or Linux command  such as openssl command    Thanks

User · Answer

Instead of using sed to filter out the certificate  you can also pipe the openssl s client output through openssl x509 -out certfile txt  for example   echo      openssl s client -connect my server com 443 -showcerts 2 gt  dev null   openssl x509 -out certfile txt

User · Answer

Copy the certificate into the directory Java home Jre Lib Security   Change your directory to Java home Jre Lib Security gt    Import the certificate to a trust store   keytool -import -alias ca -file somecert cer -keystore cacerts -storepass changeit  Return   Trust this certificate   Yes    changeit is the default truststore password

User · Answer

The way you import a  cer file into the trust store is the same way you d import a  crt file from say an export from Firefox   You do not have to put an alias and the password of the keystore  you can just type    keytool -v -import -file somefile crt  -alias somecrt -keystore my-cacerts   Preferably use the cacerts file that is already in your Java installation  jre lib security cacerts  as it contains secure  popular  certificates   Update regarding the differences of cer and crt  just to clarify  According to Apache with SSL - How to convert CER to CRT certificates  and user  Spawnrider     CER is a X 509 certificate in binary form  DER encoded     CRT is a binary X 509 certificate  encapsulated in text  base-64  encoding     It is not the same encoding

User · Answer

Copy the certificate into the directory Java home Jre Lib Security   Change your directory to Java home Jre Lib Security gt    Import the certificate to a trust store   keytool -import -alias ca -file somecert cer -keystore cacerts -storepass changeit  Return   Trust this certificate   Yes    changeit is the default truststore password

User · Answer

Instead of using sed to filter out the certificate  you can also pipe the openssl s client output through openssl x509 -out certfile txt  for example   echo      openssl s client -connect my server com 443 -showcerts 2 gt  dev null   openssl x509 -out certfile txt

User · Answer

The way you import a  cer file into the trust store is the same way you d import a  crt file from say an export from Firefox   You do not have to put an alias and the password of the keystore  you can just type    keytool -v -import -file somefile crt  -alias somecrt -keystore my-cacerts   Preferably use the cacerts file that is already in your Java installation  jre lib security cacerts  as it contains secure  popular  certificates   Update regarding the differences of cer and crt  just to clarify  According to Apache with SSL - How to convert CER to CRT certificates  and user  Spawnrider     CER is a X 509 certificate in binary form  DER encoded     CRT is a binary X 509 certificate  encapsulated in text  base-64  encoding     It is not the same encoding

User · Answer

Copy the certificate into the directory Java home Jre Lib Security   Change your directory to Java home Jre Lib Security gt    Import the certificate to a trust store   keytool -import -alias ca -file somecert cer -keystore cacerts -storepass changeit  Return   Trust this certificate   Yes    changeit is the default truststore password

User · Answer

Copy the certificate into the directory Java home Jre Lib Security   Change your directory to Java home Jre Lib Security gt    Import the certificate to a trust store   keytool -import -alias ca -file somecert cer -keystore cacerts -storepass changeit  Return   Trust this certificate   Yes    changeit is the default truststore password

[digital-certificate] Digital Certificate: How to import .cer file in to .truststore file using?

Examples related to digital-certificate

Examples related to truststore