Vovando Dev

Today we need to get a wildcard SSL certificate into a Java Keystore format. First copy everything you need to a /tmp folder. There are  gd_bundle.crt  , domain.com.crt and domain.com.key

1. Concatenate your certificate with gd_bundle:

# cat   gd_bundle.crt  domain.com.crt > domain.com-combined.crt

2. Run the following to convert your SSL combined bundle into PKCS12 format:

#cd /tmp

# openssl pkcs12 -export -name my.domain.com -in domain.com-combined.crt  -inkey  domain.com.key  -out keystore.p12

Where:
-name (my.domain.com) is the domain you are going to be using the key on. Don’t use your *.domain.com address. Use name.domain.com or something like this.
-in is your signed certificate
-inkey is the key file from the server that generated your CSR (certificate signing request)
-out is just a name I picked

You will be asked to generate a password! Enter you password twice.

3. After that run this to generate your JKS:

(keytool is located in the bin-directory of your JRE-installation.)

#cd /usr/java/bin/

# ./keytool -importkeystore -destkeystore keystore.jks -srckeystore keystore.p12 -srcstoretype pkcs12 -alias my.domain.com

-destkeystore is the name of the keystore (you are creating it)
-srckeystore is the PCKS12 keystore created above
-alias is the domain from above – make sure it matches the domain from above!

You will be asked to enter the password again. Do so and select a new password (or use the same one as before) when prompted.

4. Now you can verify it:

#keytool -list -v -keystore keystore.jks

 
That’s all, friends.