0

I bought an SSL certificate in GoDaddy. I need to use it to start my Spark Java self-contained server through a secure connection. According to the documentation in http://sparkjava.com/documentation#examples-and-faq, I need to do the following:

String keyStoreLocation = "deploy/keystore.jks";
String keyStorePassword = "password";
secure(keyStoreLocation, keyStorePassword, null, null);

But when I download the certificate from GoDaddy I got the files:

11111.pem
11111.crt
bundle-g2-g1.crt

What do I need to do to convert these files is something compatible to use as the first parameter of secure(keyStoreLocation, keyStorePassword, null, null);?

Yun
  • 2,536
  • 6
  • 7
  • 26
RDV
  • 167
  • 1
  • 3
  • 13
  • 1
    You didn't get the .pem file from GoDaddy, surely? In the beginning you must have had a private key, which you didn't get from GoDaddy, and didn't send to them. Show *all* the steps. – user207421 Oct 06 '21 at 09:40

1 Answers1

2

IF the 1111.pem file is your private key (check the first line is 5 hyphens, BEGIN, optionally a word like RSA EC or ENCRYPTED, PRIVATE KEY, and 5 hyphens) then start with

openssl pkcs12 -export -in 1111.crt -inkey 1111.pem -certfile bundle-g2-g1.crt -out my.p12

Nearly all java programs since 2018 can actually use a PKCS12 instead of JKS for a keystore, but if this code really does need a JKS then do

keytool -importkeystore -srckeystore my.p12 -destkeystore my.jks -deststoretype jks 
# if using very old Java (below 8u40 or so) add -srcstoretype pkcs12

Mostly dupe (but somewhat updated from)
Combined .pem certificate to truststore/keystore.jsk
convert certificate from pem into jks
How do I generate X.509 certificate from key generated by openssl and more linked there
https://serverfault.com/questions/483465/import-of-pem-certificate-chain-and-key-to-java-keystore

dave_thompson_085
  • 29,499
  • 6
  • 42
  • 62