Hi all,
I am trying to renew an expiring certificate but not having any luck. These are the commands we have previously run without issue:
..\jre\bin\keytool -genkey -alias server -keyalg RSA -keysize 2048 -keystore <FILENAME>.jks
..\jre\bin\keytool -certreq -alias server -file csr2022.csr -keystore <FILENAME>.jks
..\jre\bin\keytool -import -alias server -file <CERT_NAME.p7b> -keystore wisdom.jks
Its failing on the last step (the import) with:
... is not trusted.
Warning:
Reply #4 of 4 uses the SHA1withRSA signature algorithm which is considered a security risk. This algorithm will be disabled in a future update.
Install reply anyway? [no]:
We use a custom location for the "keystoreFile" as specified in the server.xml config. Any help would be appreciated
Thanks,
David