Keytool import a certificate

I got a free personal developer certificate from thawte.com. But now I get a "unsupported encoding" when I want to ready the received certificate.
My keystore is based on jks, but the received certificate is in a Netscape Security or a PKCS7-format. Could that be the problem?
Or any other ideas....
thanks a lot
steinfresser

Should be ok with PKCS#7!
You can get a tool that helps in creating certificates, requesting certs, importing certs, and signing files for free at
http://www.xlreader.com/download.html
once there, look for XLRSecTool
-- Robert
====
[email protected]
www.xlreader.com
XLReader Project
Secured Online Documentation Solutions
====

Similar Messages

Using keytool to import a certificate

I'm trying to import in the samplecacerts file a seft signed certificate generated for test purposes on my test web server.
The command I issued was:
keytool -import -alias mycert -file mycert.cer -keystore samplecacerts -trustcacert -storepass changeitand the answer was:
keytool error: Signature not availableIf I accept this certificate using my class that implements the interface X509TrustManager and getting data using HttpsURLConnection all works fine.
I used two methods to export the certificate:
1. I exported it after accepting it in Ienternet Explorer
2. I wrote it from the method isServerTrusted as suggested by Aseem in his sample code (http://forum.java.sun.com/thread.jsp?forum=9&thread=14884&start=25&range=1&hilite=false&q=)
The two generated files are identical.
Anyone can help me?
Thank
Aldo

I am having the same problem - and I don't understand the one reply you got.
So here goes. WHY can I easily import a self-signed certificate as a "trusted root" in IE, but I cannot import the same certificate into my cacerts file using keytool.exe? Keytool always gives the error, "Signature not available".
Can someone please tell me what the heck I am supposed to do? All I want to do is be able to connect to an https URL in my Java code and read the contents. I "trust" the darn server, but the keytool utility doesn't seem to "trust" me....
BTW, yes I am using JSSE, it's not a code problem it's a keytool problem.

Import a Certificate in Keystore without confirmation

Hi:
I'm trying to import a X509 certificate into a Java Keystore, by executing Runtime.getRuntime().exec(command), where command is a String representing the command I want to execute.
The problem is that a "keytool -import" command requires that the user confirms the operation and I can't confirm this way.
Exists some options in a keytool command that allows to import a certificate without confirmation??
Can I make this operation with Keystore and X509Certificate classes??
Dani

Independently the kind of question I post, your reply ...Meaningless. My reply was not 'independent of' your question.
seems to be from a person with no education.Ignorant, irrelevant, and offensive speculation.
It's not even logical. It isn't the uneducated who refer you to references. Arguably it is the uneducated who refuse to read them ...
If you know the answer, post it. I told you where to find it. A much better answer. There is a clear implication that what you're looking for is there to be found. I would have expected a computer programmer to make that logical deducation.
If you don't know the answer, shut up please and make possible that the entire world still living without have to read your rude and arrogant repliesIt's not me who's being rude here.
If the first time you reply to my question, you have written some like "the answer is very simple: add -noprompt in order to remove the interactivity with the user", but maybe the reason for your rude manners ...Again it's not me who's being rude here. If you had done what I suggested you would have found the answer, and a lot more besides, and you would also have developed the habit of not wasting too much time on forums as you are now.
is that you don't know the answer.As I said above, the logical implication of my posting is that I not only knew the answer but where it was to be found.
You won't get far in this business with attitudes like that, or by expecting to be spoon-fed. You are expected to be able to read technical documentation for yourself.

Importing selfsigned certificate

How to import selsigned certificate in weblogic8.1

Hi,
Have a look at the documentation: http://e-docs.bea.com/wls/docs81/secmanage/ssl.html#1167485
There is a tool which is very helpful to deal with Java keystores:
http://homepage.ntlworld.com/wayne_grant/keytool.html
That should get you started...
Kai
boney Jose <[email protected]> wrote:
How to import selsigned certificate in weblogic8.1

Importing LDAP Certificate : Unknown PATH

I am trying to import an LDAP trusted certificate, using the following command :
keytool -import -file tomcatCert.crt -trustcacerts -alias tomcat -keystore c:/Program Files(x86)/Java/jdk/jre/lib/security/cacerts -storepass changeit
However, I keep getting the error : the system cannot find the path specified.
Obviously, there is a problem with the path I specified there. But, what?
The file "cacerts" is contained in the directory path : C:.....Program Files (x86)......Java......jdk1.6.0_14......jre......lib......security.....cacerts.
So, how else can I specify the PATH in the command line??
Any help here would be greatly appreciated
Thanks

I finally got the LDAP connection working on my IDM.
*"Test Connection Succeeded"*
However, when I try to create a new User on the LDAP Resource, I get the following error :
javax.naming.CommunicationException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Does anyone have an idea what this could mean?
Thanks

Can not import Verisign certificate

Dear all,
I am trying to import a Verisign certificate in my ABAP BW 3.5
Production system.This is a certificate renewal as I had a certificate there for a year that is to expire on the 12th of June. However, because of the fact that we had to change the SSL
PSE so that it contains field SP, it is more like installing a new
certificate.
What I did: I deleted the old PSE that didn't have any information about the "State" field and created a new one.
I then created the CSR request to Verisign. I received
the response from Verisign, which I pasted in a text file together with the Verisign Intermediate and Verisign Root certificate which I used last year as well when I installed a Verisign certificate in this server for the first time.
When I apply the response, by pasting the contents of the text
file created above, I get the message:
"CA Certificate missing in database"
I have already looked at notes 508307, 518185, 510007, 1074447, 511919
I am sure that the Verisign root and Intermediate certificates are ok because I have used them successfully in the past in the same server and recently to create the certificate chain for other system certificates of my EP 6.0 landscape.
I am also sure that the Verisign CA root certificate exists in the
database, I checked table STRUSTCERT and it is there. Also, if it didn't exist, I wouldn't have been able to import the Verisign certificate last year
I haven't restarted ICM so the previous certificate still works. After the 12th of June though it will expire and all funtionality based on HTTPS in BW will not work.
Many thanks in advance for your help
Regards
Andreas

Just created a new SSL PSE and imported the certificate chain again and this time it worked...

Error occuring during import of certificate for SSO configuring in BI

Hi,
I am configuring the SSO with logon ticket for BI system.
I downloaded the certificate from portal server.
But while importing this certificate on R/3 server it shows error
"Error occurred during import"
Message no. TRUST008
Please suggest me any solution on it.
Thanks & Regards,
Vishal.

Hi Vishal,
Probably the certificate already exists - see https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/0077873d-0b01-0010-1abb-cfbf21d1aa43 page 4.
Hope it helps
Detlev

While importing a certificate I'm getting an error. What to do?

I am trying to import a certificate, but after filling in my password I am getting the following error:
PKCS #12-processing failed, reason unknown.
(I translated this from Dutch, so it may not literally be the same...)
Hope someone out there knows what to do...

You can contact the iTunes Store Customer Service department at no charge using the form on their Support page (select the category and subcategory closest to the issue you're reporting and you'll find an "Email Us" button) and explain your problem to them.
Copied from Varjak Paw in :https://discussions.apple.com/thread/2598671

Help needed in importing SSL Certificate

Hi All,
The SSL certificate in our application server has expired. We have created a new certificate and imported it through oracle wallet manger. But the application server is not recognizing the new certificate. Still shows certificate error when we try to access the application via https.
We are using oracle application server 10.1.2.0.2
I don’t have much knowledge on application server.
Please help me on this.
Thanks in Advance,
Jey

Hi Jeykrishnan,
The installation consists of three main parts:
a) Importing the Primary Root CA
b) Import the Intermediate Certificate and Cross Certificate
c) Installing your SSL123 certificate
a) Importing the Primary Root CA
1. Launch Oracle Wallet Manager.
2. Click Operations and select Import Trust Certificates from the menu
3. When the Import Trusted Certificate window appears, click Paste the Certificate and click OK.
4. When the message "Please provide a base64 format certificate and paste it below" appears, paste the entire contents of Primary Root CA text into the box and click OK.
5. A message should appear that the import was successful and you will see the Root Certificate at the bottom of the Trusted Certificates tree.
b) Importing the Intermediate and Cross certificates
1. Launch the Oracle Wallet Manager.
2. Click Operations > Import Trust Certificates from the menu.
3. When the Import Trusted Certificate window appears, click Paste the Certificate and click OK.
4. When the message "Please provide a base64 format certificate and paste it below" appears, paste the entire contents of the Intermediate Certificate text into the box and click OK.
5. A message should appear that the import was successful and you will see the Intermediate Certificate at the bottom of the Trusted Certificates tree.
6. Repeat the same steps for the Cross certificate
c) Importing your SSL123 certificate
1. Click Operations > Import User Certificate from the menu bar.
2. The Import Certificate dialog appears.
3. Select the Paste the Certificate radio button, and click OK.
4. The Import Certificate dialog appears.
5. Paste the entire contents of your SSL123 Certificate file and click OK.
6. A message should show that the certificate was imported successfully.
7. When you return to the main window, wallet status should show "Ready."
Regards
FAbian

How can I import security certificates from Explorer to Firefox?

I deleted several certificates before I decided it was a bad idea - too late ... many of my frequently visited sites won't validate at all or, will come up in plain text vs. html. Those sites still work in Explorer so, logic says I could import trusted certificates.

You need to export the certificates in IE and import them in the Firefox Certificate Manager.
*Firefox/Tools > Options > Advanced > Certificates: View Certificates

How to import a certificate in OHS

Hi,
We have WebLogic 10.3.5 and SOA 11g installed which is front end by OHS. We have outside vendor that hit OHS and then OHS does the routing to web logic and SOA. Vendor have provided a certificate that we need to import into OHS. Wanted to find out how to import a certificate in OHS. Any help is appreciated.
Thanks

http://docs.oracle.com/cd/E21764_01/web.1111/e10144/getstart.htm#HSADM860

Can't import user certificate in wallet manager EBS 12

Hi there.
I'm trying to configure my EBS 12 with SSL and I'm following the instructions described in metalink note number 376700.1
Everything went well untill I tried to import the user certificate isued by verysign, when I try to do that the following error occurs: user certificate import has failed because the ca certificate does not exist.
I created the request certificate, I sumbited to verysign, got my free trial certificate and when I try to import it, the error happens.
Got any sugestions in how to overcome this problem?
Regards,
Ricardo Vilhena

Ricardo,
There is one reported issue with the test CA Root is that it is saved as DER encoding, but OWM expects BASE64 encoding. Please refer to the following note for the suggested solution.
Note: 228638.1 - How to configure SSL Communication between SSO Server and OiD in 9iAS Release 2
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=228638.1
If the above does not help, then please review the following:
Note: 300723.1 - OWM Import User Certificate Key Error
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=300723.1

Import the certificate to establish a trust relationship

Hi ,
In BI Configuration, Bi Diagnostic tool gives the below error.
*Calls from WebAS ABAP to WebAS Java will fail because the certificate of the BI mastersystem is not imported into J2EE ticket keystore
Import the certificate to establish a trust relationship*
Please help
Thanks, Satish

Are u having problems importing the certificate ?
If so,
When you are in STRUSTSSO2 and you double clik on "Owner" the below section gets updated with the certificate information. Make sure that the certificate is valid and you have proper CN and OU configured.
When you export the certificate from STRUSTSSO2, please select Base64 as the file format for the certificate that is exported and then try to import that one in the java system.
(or)
Are u having problems after importing the certificate on Java system?
If so, what is the error you are facing ?
- Shanti

Not able to import others certificate in firefox

dear all
i have to change my plateform from windows to linux. i am working on security programming. even i find it tough to do simple stuffs. i am using fedora linux and firefox browser. i am trying to install others certificat. i am not able to do so. its giving me error. i had already imported the root CA certificate and the CA certificate successfully.
error:
the certificate can't be verified and will not be imported. the certificate issuer might be unknown or untrusted, the certificate might have expired, or been revoked, or the certificate might not have been approved.
could any body give me some idea about all these simple issues. it will be very helpful if u could give me any link from where i can get some relevant materials.
thanks
ajkr
Message was edited by:
ajkr
Message was edited by:
ajkr

If you already have the CA certificate chain in your cert8.db, then you need to make sure that the CA certs are trusted. If the trust settings are missing, then your end-entity cert will not get verified successfully. Use Firefox to change the trust settings on the CA certs and try the operation again.

Importing a certificate that wasn't created within jes into jes4 messaging

Hi,
We want to enable imap over ssl into jes4, so we tried to re-use a wildcard certificate that we received from globalsign.
this certificate was generated using openssl on another server. We received a file from globalsign in the .pem format
Now, we tried to import this certificate into our jes5 messaging server via the ldap console
We got an error stating:
"Either this certificate is for another server, or this certificate was not requested using this server". (the latter suggestion applies in our case).
Is there a possibility somehow to import this certificate, or is this technically not possible ?
kind regards,
Tom

Importing certificates not generated/requested by msgcert/admin console has been discussed in other forums:
e.g.
http://forum.java.sun.com/thread.jspa?threadID=5018886&messageID=9224268
Regards,
Shane.

Keytool import a certificate

Similar Messages

Maybe you are looking for