keytool error: java.lang.Exception: Certificate reply and certificate in keystore are identical

Question

i want to sign my jar file with certificate. i have followed below steps. C:\Program Files\Java\jdk-10.0.2\bin>keytool -genkey -alias testals -keystore testks

C:\Program Files\Java\jdk-10.0.2\bin>keytool -export -keystore testks -alias testals -file testcer.cer

Certificate stored in file

C:\Program Files\Java\jdk-10.0.2\bin>keytool -import -alias testals -file testcer.cer -keystore testks

but while importing getting exception as Certificate reply and certificate in keystore are identical.

please help me how can do this?

The certificate is already stored in the keystore - why do you want to import it again? (export: copy certificate to file; import: read a certificate from file into the keystore) — user85421
– user85421, Commented Aug 3, 2018 at 11:38
@sai did you solve this? I have the same error although it seems you mistyped your sentence. — AyukNayr
– AyukNayr, Commented Sep 2, 2018 at 10:29

Felix Andrew · Accepted Answer · 2019-02-19 05:08:34Z

8

While importing use different alias name, don't use the alias name which used for exporting. It will work.

It's because you are importing the self signed certificate for root, not for the server certificate.

answered Feb 19, 2019 at 5:08

Felix Andrew

811 silver badge2 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Noel Kennedy · Accepted Answer · 2021-04-03 12:05:09Z

0

The below are identicals observed from your commands and hence the error.

Keystore Name: testks Alias: testals File: testcer.cer

If you need your jar signed, do follow the below steps.

Generate a certificate signing request from your keystore. A sample command for the same looks like the one below.

keytool -certreq -file testks.csr -keystore testks -alias testals -ext SAN=dns:testals

Provide the CSR generated with your IT network security team and request them for the signed certificates
Import the certificate reply like you did earlier, but with the signed certificates and you must no longer see this error.

Let us know if this worked.

answered Apr 3, 2021 at 12:05

Noel Kennedy

312 bronze badges

Collectives™ on Stack Overflow

keytool error: java.lang.Exception: Certificate reply and certificate in keystore are identical

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related