Collectives™ on Stack Overflow

Find centralized, trusted content and collaborate around the technologies you use most.

Teams

Q&A for work

Connect and share knowledge within a single location that is structured and easy to search.

https://www.mulesoft.com/tcat/tomcat-ssl

https://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html

but whenever I try to execute this command

keytool -import -alias tomcat -keystore <your_keystore_filename> -file <your_certificate_filename>

I gave your_certificate_filename as (absolute path)JAVA_HOME\bin\mycert.csr

I get exception

keytool error: java.security.cert.CertificateParsingException:java.io.IOExcepti on: ObjectIdentifier() -- data isn't an object ID (tag = 49)

I have downloaded : Verisign.com trial certificate : http://www.verisign.com/support/verisign-intermediate-ca/Trial_Secure_Server_Root/index.html

then keytool -import -alias root -keystore <your_keystore_filename> -trustcacerts -file <filename_of_the_chain_certificate> this is I guess root certificate and this executed without ant errors. and then tried above cmd for importing my new certificate

*I am running my cmd prompt in admin mode

What is wrong?

.csr stands for Certificate Signing Request. You need to either provide that to your CA (sounds like verisign), or create a self-signed cert (a root CA cert) and use that to create a signed cert from the .csr. You'll usually end up with a .cer or a .pem and a private key, possibly bundled in a keystore or pkcs12 or something similar.

Thanks for contributing an answer to Stack Overflow!

• Please be sure to answer the question . Provide details and share your research!

But avoid …

• Asking for help, clarification, or responding to other answers.
• Making statements based on opinion; back them up with references or personal experience.

To learn more, see our tips on writing great answers .