I have created and self-signed an X.509 cert with OpenSSL

--snip--
root# openssl genrsa -des3 -out mysite.key 1024

root# openssl req -new -key server.key -out mysite.csr

root# /usr/local/bin/sign.sh mysite.csr

root# # openssl verify -CAfile /etc/ssl/certs/ca.crt mysite.crt 
/etc/ssl/certs/fivesync.crt: OK
--snip--


I then tried to create the keystore file:

--snip--
orion]$ keytool -keystore keystore -keyalg "RSA" -import -trustcacerts -file \
mysite.crt 
Enter keystore password: TestPass
keytool error: java.lang.Exception: Input not an X.509 certificate
--snip--

The keytool is from Sun's jdk-1.3.1-fcs package. I've tried it in both Linux
and Win2k with the same result.

What to do?

t: Peter

Reply via email to