trying to import a root CA generated by vault PKI into Java keytool

188 views
Skip to first unread message

Ofer Eliassaf

unread,
Feb 20, 2018, 7:44:00 AM2/20/18
to Vault
I try to import the CA that I created using vault's PKI tool into Java's keytool - I get the following error:

"keytool error: java.lang.Exception: Input not an X.509 certificate"

The command I use is the following:
keytool -import -trustcacerts -alias root -file ./dummy.crt -keystore keystore.jks

where dummy.crt is a root CA generated by vault.

Did anyone succeeded in doing such an import?

Thanks!


Jeff Mitchell

unread,
Feb 20, 2018, 8:02:28 AM2/20/18
to Vault
Hi there,

If the file is in pem format, I believe you will need to convert it to der in order to import.

Best,
Jeff

--
This mailing list is governed under the HashiCorp Community Guidelines - https://www.hashicorp.com/community-guidelines.html. Behavior in violation of those guidelines may result in your removal from this mailing list.
 
GitHub Issues: https://github.com/hashicorp/vault/issues
IRC: #vault-tool on Freenode
---
You received this message because you are subscribed to the Google Groups "Vault" group.
To unsubscribe from this group and stop receiving emails from it, send an email to vault-tool+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/vault-tool/866d394a-93f7-41f8-9539-91368d546d38%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Reply all
Reply to author
Forward
0 new messages