#Keystore explorer certificate chain how to

Moreover, JDK distributions are shipped with an executable to help manage them, the keytool. A Java Keystore is a container for authorization certificates or public key certificates, and is often used by Java-based. This manual describes the most often used functions, like creating a keypair and CSR, importing your certificate into the keystore, exporting the keypair as PFX or PEM format, and importing a PEM key to convert to PFX. THIS WILL NOT IMPORT THE PRIVATE KEY SO THE KEYSTORE CAN'T BE USED ON THE SERVER TO MAKE THE TLS CONNECTION A KeyStore, as the name suggests, is basically a repository of certificates, public and private keys. Java Keytool is a key and certificate management tool that is used to manipulate Java Keystores, and is included with Java. Keystore Explorer is a graphical user interface with the same powers as OpenSSL, and used for many certificate conversions.

#Keystore explorer certificate chain how to

I know how to import the self signed certificate only: // create the keystore and import the public key. This works but I'd like to implement the last step without using a GUI. Please notice that the certificate is selfsigned:ġ) Generate key with AES256 openssl genrsa -aes256 -out server.key 1024Ģ) Generate cert request for CA openssl req -x509 -sha256 -new -key server.key -out server.csrģ) Generate self signed expiry-time 10 years openssl x509 -sha256 -days 3652 -in server.csr -signkey server.key -out selfsigned.crtĤ) Use a program like KeyStoreExplorer to import the pair (private key and selfsigned certificate) in a new JKS KeyPairCertificateChainDetailsAction.tooltipDtails of Key Pair entrys certificate chain.

I used the following steps to create a new Java keystore with a pair of private/public key to be used by a Java (internal) server with TLS. AboutAction.tooltipDisplay information about KeyStore Explorer.