My domain is: sophotech.ddns.net I ran this command: keytool -keystore keystore.test -import -alias sophotech.ddns.net -file /etc/letsencrypt/live/sophotech.ddns.net/fullchain.pem -trustcacerts Started server on port 80 (HTTP), port 9443 (HTTPS, letsencrypt certificate), port 443 (HTTPS, self-si…

I don't use Jetty, so may not be the best person to provide an accurate answer :wink: As I was doing a quick check though, it would appear Jetty 8 is End of Life, so should be updated to v9 (although I'm sure that's not causing this issue ) Your command keytool -keystore keystore.test -import -a…

Don’t worry, I know Jetty 8 is EOL. I’ve been avoiding upgrading for ages, on the basis of “if it ain’t broke, don’t fix it” and configuring Jetty 9 is a whole new ball game compared to Jetty 8. I’ve never used a real certificate before (always used self-signed to avoid paying money until I heard a…

The only thing I could see in the Jetty Documentation was the section on “Loading Keys and Certificates via PKCS12” fullchain.pem is “All certificates, including server certificate (aka leaf certificate or end-entity certificate). The server certificate is the first one in this file, followed by an…

I found some advice on stackoverflow about using openssl to create a PKCS12 file and then import it as a keystore using keytool: openssl pkcs12 -export -in /etc/letsencrypt/live/sophotech.ddns.net/fullchain.pem -inkey /etc/letsencrypt/live/sophotech.ddns.net/privkey.pem -out cert.p12 -name sophote…

It may be worth having a look at other java installations such as Importing LetsEncrypt into Java and Glassfish How to use the certificate for Tomcat Let's encrypt and JIRA/Tomcat - fully automated script

The only difference I can see between what is given in your link and what I'm doing is I forgot to supply a -alias option to keytool. So I tried that, and I still get a server crash on startup. The keystore now looks like this (but I have no idea whether it looks sensible or not!): Alias name: sop…

I can only suggest changing your title to something like “how to get certificates in Java keystore” as that might attract those who know more about keystore

I have no idea how to change the title… so I’m going to post it as a new query with your suggested title… :slight_smile: I’m obviously doing something wrong because listing the keystore contents with keytool shows “Your keystore contains 1 entry. Entry type: PrivateKeyEntry” whereas the link you ga…

There is a pencil mark next to the title - click that. (or I can edit it for you )

How to get certificates into Java keystore?

Help

Topic		Replies	Views
How to use the certificate for Tomcat Server	46	90404	November 11, 2017
Importing LetsEncrypt into Java and Glassfish Server	17	23698	August 26, 2018
Using LetsEncrypt Certificates on Tomcat 8.x on Windows Help	12	23962	March 13, 2017
Using with Ubuntu 18.04/Jetty Help	19	4216	November 8, 2019
Java Socket, JKS Problem Help	6	1044	July 9, 2021

How to get certificates into Java keystore?

Related topics