Keytool Exception: Failed to establish the chain-[Need Help]

[Mouza Ali]

Hi all,

I'm trying to create a self signed certificate and make it as a root CA. Then, I create another certificate and sign it with that root CA. However, there was a problem while importing the certificate to the server keystore.

Below are the steps -[Which I found online], and I'll show where the error incured:

-------------------------------------------------------------------
Setting up the root CA
-------------------------------------------------------------------

req -new -newkey rsa:1024 -nodes -out ssl/ca/ca.csr -keyout
ssl/ca/ca.key

penssl x509 -trustout -signkey ssl/ca/ca.key -days 365 -req -in
ssl/ca/ca.csr -out ssl/ca/ca.pem

keytool -import -keystore $JAVA_JOME/jre/lib/security/cacerts -file
ssl/ca/ca.pem -alias my_ca

echo "02" > ssl/ca/ca.srl

-------------------------------------------------------
setting up the server now
-------------------------------------------------------

keytool -genkey -alias tomcat -keyalg RSA -keysize 1024 -keystore
ssl/server/server.ks -storetype JKS

openssl x509 -CA ssl/ca/ca.pem -CAkey ssl/ca/ca.key -CAserial
ssl/ca/ca.srl -req -in ssl/server/server.csr -out
ssl/server/server.crt -days 365

[b]keytool -import -alias tomcat -keystore
ssl/server/server.ks -trustcacerts -file ssl/server/server.crt[/b]

The error was in the last line of the commands. It should print something like: Certificate reply was installed in keystore
But instead it prints: Keytool Exception: Failed to establish the chain !!

Please can anyone help? All the solutions I found online are related to real CAs like verisign and thawt, but here I'm trying to create my own CA.
I'm wasting too much time on this problem and couldn't find anything