Geek asks and answers

How to import jks certificate into Java trust store

How to import .jks file into java security repository? The entire tutorial that I see uses the ".crt" file. However, I only have a .jks file, which is also the keystore generated with the keytool command.

I am currently following this tutorial .

I was able to create a pair of Java key and key keys and generate a Certificate Signing Request (CSR) for an existing tutorial-based Java key store. But I cannot import the root or intermediate CA certificate into the existing Java key store and import the signed primary certificate into the existing Java key store because it is looking for the ".cert" file.

Did I miss something on the steps listed in the tutorial? How can I trust a certificate if the only file I have is a .jks file? And what is the use of a .csr file?

Please note that I am using Windows.

+5
source share
1 answer

".jks"This is a trust store, or at least it should be if you assigned it to JSSE. You must add certificates from your CA to this file. Then the software will look for a chain of certificates, iterating through the certificates. The private key must remain in the ".jks"password protected file .

, ".jks" . , , . . X5.09 DER ( Java keytool).

( ):

  • , (.jks)
  • , , .
  • , ( SSL)
  • , , ( "" ).
  • , . , .
+10

More articles:


All Articles