Keytool Import Certificate
Open a command line prompt and navigate to the jrehomepathbin directory.
Keytool import certificate. With this new information what remains is to figure out how to convert our private key and certificate chain into a pkcs12 file. Import an existing ssl certificate and private key for wowza streaming engine originally published on 08172016 updated on 05132019 852 am pdt this article describes how to use an existing secure sockets layer ssl certificate with wowza streaming engine media server software. You import secure socket layer ssl and transport layer security tls certificates into the wave servers java keystore of trusted certificates using the keytool utility that is supplied with all java runtime environments jres. The keytool prints the certificate information and asks you to verify it.
If youd like to see the entire process of creating a private key exporting it in a certificate file importing it into a public keystore and listing the keystore contents i have all of that in one place in a long but complete java keytool keystore genkey export import certificate and list tutorial as well. In this case the alias should not already exist in the keystore. If the alias points to a key entry then keytool assumes you are importing a certificate reply. Each fingerprint is a relatively short number that uniquely and reliably identifies the certificate.
The data to be imported must be provided either in binary encoding format or in printable encoding format also known as base64 encoding as defined by the internet rfc 1421 standard. These commands allow you to generate a new java keytool keystore file create a csr and import certificates. Keytool import trustcacerts alias root file rootcrt keystore keystorejks. Keytool can import x509 v1 v2 and v3 certificates and pkcs7 formatted certificate chains consisting of certificates of that type.
Import a signed ssl primary certificate to an existing java keystore. Keytool import trustcacerts alias mydomain file mydomaincrt keystore keystorejks. We will take advantage of enhancements added to keytool with the java 6 release. Namely that keytool can merge and import keystores that are in pkcs12 format.
Enter the following command. For example by comparing the displayed certificate fingerprints with those obtained from another trusted source of information.