...
Import PEM (in Windows CER or CRT) files
You need to install all certificate files one by one. Here an example:
For PEM files, the response to the CSR must be in the form of a complete certificate chain. The PEM file for import under the alias "main" first contains the signed server certificate, followed by all associated intermediate certificates in the order of the chain. The root certificate can be added at the end if it was provided by the CA or is required by the setup.
On Windows, for example, the files are combined as follows:
C:\diagserverdata>type test.customed.de.pem intermediate.cert.pem intermediat2.cert.pem root.cert.pem > test.customed.de-fullchain.pemC:\diagserverdata>"c:\Program Files\custo diagnostic server\jre"\bin\keytool -import -trustcacerts -alias root -file rootca.cer -keystore keystore.jks -storepass custo1234 C:\diagserverdata>"c:\Program Files\custo diagnostic server\jre"\bin\keytool -importcert -alias |
Important:
...
The "main" alias must not be deleted, because it contains the private key for which the CSR was generated. Back up the keystore before importing. After importing, use `keytool -list -keystore keystore.jks -v` to verify that "main" is displayed as a `PrivateKeyEntry` with the complete certificate chain.
Finally:
Restart the custo diagnostic service and check with a web browser (use the URL in the custocfg.ini and use https instead of http) if everything works as expected.
...