Importing certificate into keystore.

[Dave Trower]

I have a certificate that I want to import into the keystore using the java keytool command. Can this be done? It seems like the keytool command onlty allows you to create certificates or import CA certificates.

[Freddy Wong]

Yes, you surely can do that. To import a certificate, you can use this command:

    
keytool -import -file <file> -keystore <keystore.jks> -alias <whatever>

To import a CA cert, you normally do this:

    
keytool -import -trustcacerts -file <file> -keystore <keystore.jks> -alias <whatever>

To make a certificate chain, first you need to generate a key first.

    
keytool -genkey -keystore <keystore.jks> -alias <mykey>

then after your cert has been signed by the CA, you need to import it to make a certificate chain.

    
keytool -import -keystore <keystore.jks> -alias <mykey>

Remember, to make a certificate chain, you must import it with the same alias as the key that you generated.