Knowledgebase
Keytool error: Failed to establish chain from reply Print this Article
There are two possible causes for this error:
1. No root certificate for Keytool to chain to.
Note: Keytool relies on a root certificates in order to install the certificate.
2. Error occurs because the JDK keystore is very particular about the format of the Certificate.
This error is related to the format the certificate has been downloaded in. Please make sure you download the (default) PKCS#7 which contains a complete certificate chain and which includes your certificate, as well as the Signer's certificate (Root CA certificate).
1. No root certificate for Keytool to chain to.
Note: Keytool relies on a root certificates in order to install the certificate.
2. Error occurs because the JDK keystore is very particular about the format of the Certificate.
This error is related to the format the certificate has been downloaded in. Please make sure you download the (default) PKCS#7 which contains a complete certificate chain and which includes your certificate, as well as the Signer's certificate (Root CA certificate).
Was this answer helpful?
Related Articles
Java Keytool: commands
Deleting a certificate: keytool -delete -alias aliasname List all of the...
Deleting a certificate: keytool -delete -alias aliasname List all of the...
How do I make my own bundle file from CRT files?
You may do this using you favorite text editor or by using the command line.Example: #...
You may do this using you favorite text editor or by using the command line.Example: #...
Convert certificates formats (PEM/P7B/PFX/DER)
You can change certificate format using OpenSSL commands or SSL Converter tool. The...
You can change certificate format using OpenSSL commands or SSL Converter tool. The...
Changing .crt file into the .cer format
Double-click on the yourwebsite.crt file to open it into the certificate display. In a new...
Double-click on the yourwebsite.crt file to open it into the certificate display. In a new...
Converting .pfx file for use with Apache
Run the following command with open SSL: openssl pkcs12 -in mypfxfile.pfx -out...
Run the following command with open SSL: openssl pkcs12 -in mypfxfile.pfx -out...
