CODEWITHSUNDEEP
javasslkeytool
sai
sai

Reputation: 41

keytool error: java.lang.Exception: Certificate reply and certificate in keystore are identical

i want to sign my jar file with certificate. i have followed below steps. C:\Program Files\Java\jdk-10.0.2\bin>keytool -genkey -alias testals -keystore testks

C:\Program Files\Java\jdk-10.0.2\bin>keytool -export -keystore testks -alias testals -file testcer.cer

Certificate stored in file

C:\Program Files\Java\jdk-10.0.2\bin>keytool -import -alias testals -file testcer.cer -keystore testks

but while importing getting exception as Certificate reply and certificate in keystore are identical.

please help me how can do this?

Upvotes: 4

Views: 12219

Answers (2)

Noel Kennedy
Noel Kennedy

Reputation: 21

The below are identicals observed from your commands and hence the error.

Keystore Name: testks Alias: testals File: testcer.cer

If you need your jar signed, do follow the below steps.

  1. Generate a certificate signing request from your keystore. A sample command for the same looks like the one below.

keytool -certreq -file testks.csr -keystore testks -alias testals -ext SAN=dns:testals

  1. Provide the CSR generated with your IT network security team and request them for the signed certificates

  2. Import the certificate reply like you did earlier, but with the signed certificates and you must no longer see this error.

Let us know if this worked.

Upvotes: 0

Felix Andrew
Felix Andrew

Reputation: 81

While importing use different alias name, don't use the alias name which used for exporting. It will work.

It's because you are importing the self signed certificate for root, not for the server certificate.

Upvotes: 8

Related Questions