How to make a certificate chain
Hi guys,
I am using openssl to create a certificate chain. For testing purposes, i created a self-signed root ca certificate and created a server certificate signed by the ca. Now I want to create a client certificate (using keytool) and sign it using the server certificate hence creating a chain. When I tried importing the server certificate in the client keystore I got the following error:
# keytool -import -keystore clientstore -alias CA -file server.crt
Enter keystore password: ******
keytool error: java.lang.Exception: Input not an X.509 certificate
For server certificate, I created a server certificate signing request (server.csr) and got it signed by ca as follows:
# openssl req -x509 -days 365 -in server.csr -out server.crt -key ca.key
Any help in this regard will be greatly appreciated.
Ankit
