Importing Certificates to keystore

2.2.1 Importing Certificates to keystore

The following section details the steps to be followed to import certificates to keystore.

The JKS(dls_cacerts) should be available under /WEB-INF/classes/config.
Save all the certificates from the vendor website. Note to save the certificates in "Base-64 encoded X.509(.CER)" and with extn .cer. Steps for saving certificates from the vendor website:
- Click on the padlock and choose View Certificates.
  
  Figure 2-14 Importing certificates to keystore 1
  
  Description of "Figure 2-14 Importing certificates to keystore 1"
- Click on the Certification Path tab and select the certificate with the ‘Name’ and ‘Issued To’ the same as the user-defined ID.
  
  Figure 2-15 Importing certificates to keystore 2
  
  Description of "Figure 2-15 Importing certificates to keystore 2"
- Go to the Details tab.
  
  Figure 2-16 Importing certificates to keystore 3
  
  Description of "Figure 2-16 Importing certificates to keystore 3"
- Click on the Copy to File button, and click Next. Select Base-64 encoding and save the file somewhere on your local computer.
  
  Figure 2-17 Importing certificates to keystore 4
  
  Description of "Figure 2-17 Importing certificates to keystore 4"
Run following command to import certificate into JKS(dls_cacerts)
- "keytool -keystore <Key store Path> /dls_cacerts -import -trustcacerts -file <Certificate location in file system>\xxx.cer -alias <alias as mentioned in config file>
Run following command to view details of certificate like expiration date of certificate etc.
- "keytool -list -rfc -alias alias <alias as mentioned in config file> -keystore <Key store Path> /dls_cacerts
- "keytool -list -v -alias alias <alias as mentioned in config file> -keystore <Key store Path> /dls_cacerts
For more details on keytool refer the link: http://docs.oracle.com/javase/7/docs/technotes/tools/windows/keytool.html

Parent topic: Work with SSL