How to import a certificate from file in Java using keytool

If you need to import a certificate not included as part of the JRE then you can do so using the keytool utility provided as part of the JRE/JDK installation.

keytool -keystore <path to keystore> -import -file <path to certificate> -alias <alias>

Accessing https://bugzilla.mozilla.org using a default installation of JRE 1.4.2_04 is not possible without importing the Mozilla certificate or one of the certificates in the trust hierarchy (GlobalSign Root CA, GlobalSign RootSign Partners CA, or XRamp Security Services GS CA).

The first step is to get the certificate as a file. The easiest way to do this is to surf to https://bugzilla.mozilla.org/ in Internet Explorer, go to File, then Properties. On the popped up Properties you'll see a "Certificates" button in the bottom right hand side. Click on that, select the Details tab, then "Copy to File..". Follow the wizard through saving as "DER encoded binary X.509". Name your file mozilla.cer. (Alternatively if you wish to install one of the other certificates in the chain they should be downloadable from their websites.)

Now enter the following at a DOS prompt where "c:\Program Files\Java\j2re1.4.2_04" can be substituted for your own java installation path:

keytool -keystore "c:\Program Files\Java\j2re1.4.2_04\lib\security\cacerts" -import -file mozilla.cer -alias mozilla

On executing this, you'll be prompted for a password which should be "changeit" (the default). Then enter "yes" to finish.

tags: java  

links: digg this    del.icio.us    technorati