How to import SSL certs in to keystore

Dear All

How can I solve error “There was an error one importing private key and signed certificate. Error message: org.bouncycastle.asn1.pkcs.PrivateKeyInfo cannot be cast to org.bouncycastle.openssl.PEMKeyPair” ? I have a .pem file with me that I converted from .pfx file exported from IIS webserver. Does the scenario explained by me in SU blog security - Enable secure port 9091 of Openfire server - Super User work?. How can I import private key and certificate from .pem file through the import-certificate.jsp console of Openfire server?


How did you solved the problem ?

My ssl expire in few days and when I want to add the new one I’ve the same problem.

Thanks- Eric

I have found the GUI isn’t particularly very easy to use when it comes to certificate management.

I would recommend that you take a look at

This helped me out no end when I was trying to import a signed certificate.


I’ve finaly solved the problem with the gui interface after 10 hours, private key + password and combined certificate.

About Keystore Explorer it seem very nice but everytime I’ve an error “Unable to access certificate store”. So I don’t know what I doing wrong.

I’ll doing some test on my local test server what is the good way.

Thanks - Eric