Does root and CA certificate both are same?

Question

Hi All,
Can anyone help us in understanding root and ca cet are same?
keytool -genkey -alias kumar-keyalg RSA -keystore keystore.jks(created keystore)
keytool -certreq -alias "kumar" -keystore keystore.jks -file domain.csr(Created CSR)
keytool -import -trustcacerts -kumar -file Thawte.crt -keystore keystore.jks
Afte this we are facing an error "Failed to establish chain from reply"
Next i m goint to do this
keytool -import -trustcacerts -alias kumar -file mytrustedcert.crt -keystore keystore.jks
Please help me why i am getting error
Please check the alias clearly( do we need to use the only same)
Regards
vasu

Answer 1

Hi Vasu,
You need to use same alias while creating private key in keystore(keytool -genkey), creating a certificate request(keytool -certreq) and importing the signed certificate (sent by CA) (keytool -import) to keystore.
According to you if we create a differerent alias while importing a CA and signed cer(ex: alias a for CA cert and alias b for signed cert) then which alias will be providing at host tp..?You should use alias b (signed cert alias or private key alias)
if they has given only one cert then wat we will share with trading partnes?You should share the public cert of your corresponding private key.
we submitted csr to out cert team and they has given only one cert which includes CA, is this enough or do we need to ask for other certificate also?Your cert team should provide you one signed certificate and one (or two) CA certificates. You should first import CA certs (root and intermediate CA) and then import the signed CSR.
Regards,
Anuj