Import SSL certs to red5 keystore.

munkz · 09-24-2013, 03:27 PM

Hi,

I am trying to get red5 working using ssl. Now, a cert was purchased but I can not seem to get things to work.

The current cert is pk7. My issue is this :

1. I get the email. This email has both the server and ca. Like this :

Code:

Web Server CERTIFICATE
-----------------

-----BEGIN CERTIFICATE-----
--snip--
-----END CERTIFICATE-----


INTERMEDIATE CA:
---------------------------------------

-----BEGIN CERTIFICATE-----
--snip--
-----END CERTIFICATE-----

I copied each of the above to a server.key and a server.crt. When trying to convert the set I am getting "unable to load private key". The command I am using is as follows :

Code:

openssl pkcs12 -export -name mapskey -in /root/KEYS/maps_org.key -inkey /root/KEYS/maps_org.crt -out mapskey.p12

The end goal is to import the key to a keystore that I created using the following :

Code:

keytool -keysize 2048 -genkey -alias red5 -keyalg RSA -keystore keystore

The key store is correct :

Code:

 keytool -list -keystore keystore
Enter keystore password:  

Keystore type: JKS
Keystore provider: SUN

Your keystore contains 1 entry

red5, Sep 24, 2013, PrivateKeyEntry , 
Certificate fingerprint (MD5): edit_out

Now, can I use the cert that was sent to me in the keystore? I dont know how to import it. Or, do i need to use the existing PrivateKeyEntry and have it signed?

This is for red5. I can not use a self signed. I have been told I can convert the keys to the correct formate. Google has turned up some results. HOwever, I dont think I am understanding it correctly. I would appreciate any help on this.