Skip to content

Conversation

@PerryAJ
Copy link
Member

@PerryAJ PerryAJ commented Jan 24, 2023

Additional details that may be useful to users.

2. Create a keystore and certificate
3. Open a command prompt, Change to the directory where you would like your keystore.jks file to be saved
4. Type `keytool -genkey -alias server -keyalg RSA -keysize 2048 -keystore keystore.jks`. You will be prompted for other information needed to complete the cert. The start date of the certificate will always be today, but the end date can be changed with the -validity flag. -validity 20 will make it valid for 20 days.
5. Open your newly created keystore.jks file with Keystore Explorer. Right-click on the server alias, and choose Export > Export Certificate Chain. In the Export dialog, change Certificate Length to Entire Chain. The export format should be PKCS#7 and PEM should be checked.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The certificate chain can be exported using keytool from the command prompt instead of manually using Keystore Explorer:

keytool -exportcert -keystore keystore.jks -alias server -storepass <keystore password> -rfc -file <pathToMyp7b>/cert.p7b

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants