Edit: this post was originally posted in May of 2014 and it unfortunately did not make it in the move over when we updated the web site. Sorry about that! We noticed several folks have still been linking to it and since it is still relevant we have restored it. Thank you for reading!

So you got a wildcard SSL certificate and you need to get it into a Java Keystore format. You can spend a lot of time looking for how to do it in several tutorials that kinda-of get it right or you can follow these instructions.

Step By Step Tutorial about creating keystore JKS File using Java Keytool and how to export certificate from JKS file using Keytool Export Command.To know ho. Step 5: Now it is the time to create the truststore using the public key, which was extracted at Step 3. Keytool -import -alias certificatekey -file public.cert -keystore server.truststore. Step 6: Congratulations! You have now created a self-signed certificate using the keytool. Now you can validate the contents using the keytool.

This is the process we use for generating Java Keystore files for our ThinkFree Office distributions.

First copy everything you need to a folder on your Desktop. Call it STAR_mydomain_com or something. Make sure this folder contains the certificate files you received from your CA (Certificate Authority) and the original key file generated when you generated your CSR.

Generate Jks File From Crt And Key Using Keytool

If you received your certificate from Comodo in “other” format you will have a bunch of files in there and they need to be assembled in the right order.

Keytool Create Jks Keystore

Now, open a terminal window and go to your directory. Concatenate these files:

The first file is your certificate. After that are intermediate certificates that provide validation up to the root certificate. All of them are now in a nice bundle named ca_bunlde.pem

Run the following to convert your SSL bundle into PKCS12 format: Abcd2 movie download in hd 720p hd.

Where:

-name (my.domain.com) is the domain you are going to be using the key on. Don’t use your *.domain.com address. Use mail.domain.com or thinkfree.domain.com.

-in is your signed certificate

– inkey is the key file from the server that generated your CSR (certificate signing request)

-out is just a name I picked

You will be asked to generate a password. Don’t forget it!

Now run this to generate your JKS:

-destkeystore is the name of the keystore (you are creating it)

-srckeystore is the PCKS12 keystore created above

-alias is the domain from above – make sure it matches the domain from above!

You will be asked to enter the password again. Do so and select a new password (or use the same one as before) when prompted.

That’s it! Now you can verify it:

How To Create Jks Keystore

If you are generating this for ThinkFree Office there is one more step.

Go to the System tab > Https Certification

Next to KeyStore (JKS) File click Browse and select the keystore.jks file we just created.

In Password enter the password you chose when generating the keystore (which may be the same as the one used when generating the pkcs12 file)

In Alias Name enter the domain name you entered above (thinkfree.domain.com, for example) – not the wildcard domain of the certificate.

Click Apply and wait for the message “Certificate applied successfully” to appear.

At this point log on to your ThinkFree server and restart it:

Keytool Import Crt

Followed by

Now test it to make sure it works:

You should be able to connect.

Don’t forget to undeploy your ThinkFree zimlets in Zimbra (if you use them), edit the xml configurations to change the sting to https and port to 443, re-zip them from within the folder:

And redeploy them:

You should now be able to connect from your secure Zimbra webmail with your secure ThinkFree server.