keytool cannot import certifiate - failed to establish chain from reply

ssl-certificate keytool digital-certificate
Nikola Kolev picture Nikola Kolev · Nov 11, 2012 · Viewed 23.7k times · Source

I would really appreciate if someone could shed some light on the following issue. I have read the keytool documentation but could not find any hint regarding what could be the problem here.

I created a keystore

keytool -genkey -alias privateKeyName -keyalg RSA -keystore privateKeyName.jks -validity 720 -keysize 1024

I created a certificate request

keytool -certreq -alias privateKeyName -keystore privateKeyName.jks -file certReqFileName.csr

After the signing authority gave me the .cer file, I tried to import it with

keytool –import -alias privateKeyName -file certReqFileName_t_f.cer -keystore privateKeyName.jks

Import fails with

keytool error: java.lang.Exception: Failed to establish chain from reply

I have been stuck on this for some time now so any help would be awesome. Thanks.

Answer

Andy picture Andy · Nov 24, 2012

Take a look at the option -trustcacerts, if your CA is listed in the truststore. Additionally you may have to add the CA's intermediate certificates to your keystore, first.

Related questions

Adding certificate to keystore using java code

I'm trying to establish a https connection using the server's .cer certificate file. I am able to manually get the certificate file using a browser and put it into the keystore using keytool. I can then access the keystore using …

Read More
How to properly import a selfsigned certificate into Java keystore that is available to all Java applications by default?

I do want to import a self signed certificate into Java so any Java application that will try to establish a SSL connection will trust this certificate. So far, I managed to import it in keytool -import -trustcacerts -noprompt -storepass …

Read More
Java Keytool error after importing certificate , "keytool error: java.io.FileNotFoundException & Access Denied"

I'm trying to connect a Java Web API via HTTPS; however, an exception is thrown: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException I followed these steps which I learned from online keytool & SSL cert tutorials: I copied the …

Read More