On 5/26/20, 4:34 PM, "[email protected] on behalf of David C 
Fuhs" <[email protected] on behalf of [email protected]> wrote:

> What I really want is quite simple: a series of commands that will take as 
> input a private key, a new SSL certificate, and a
> series of intermediate/CA certificates and create a PKCS12 keystore that 
> Jetty can use.

openssl pkcs12 -export -out file.p12 -inkey private.key -in public.crt 
-certfile chain.crt

There are lot of varied ways to feed the certs in, but I've used a model where 
-in is just the EE cert and -certfile has the concat'd chain of the rest.

-- Scott


_______________________________________________
jetty-users mailing list
[email protected]
To unsubscribe from this list, visit 
https://www.eclipse.org/mailman/listinfo/jetty-users

Reply via email to