Home / server / Questions / 846162
Accepted
Jasmine
Asked: 2017-04-24 22:05:20 +0800 CST

openssl and keytool conflict in PEM

  • 772

I have created a self-signed certificate in nginx server in ubuntu as below:

sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/nginx-selfsigned.key -out /etc/ssl/certs/nginx-selfsigned.crt

Coverted crt to pem using open ssl:

openssl x509 -in nginx-selfsigned.crt -out nginx-selfsigned.pem -outform PEM

When I import this certificate using keytool in debian, the import process is successful:

sudo keytool -importcert -keystore /certs -storepass changeit -file nginx-selfsigned.pem -alias some alias

But after that, the certificate isn't trusted. Why the importing certificate isn't trusted?

Any suggestion about this issue would be appreciated.

nginx

1 Answers

  1. Best Answer

    If you want the self signed certificate to be trusted, it must be in the "Trusted CAs" certificate store on each client that is connecting. Depending on your browser, you should be able to view the cert and see why it doesn't trust it also (e.g. not yet valid, expired, name mismatch, not from trusted CA, etc.)

    • 1