How to install a certificate chain
1. Generate a Keystore
keytool -keysize 2048 -genkey -alias brekeke -keyalg RSA -keystore keystore.jks
2. Generate a CSR (Certificate Signing Request). In this example, the CSR file is “server.csr”
keytool -certreq -keyalg RSA -alias brekeke -file server.csr -keystore keystore.jks
3. Request CA to sign “server.csr”
4. Import the root certificate into the keystore. (optional)
In this example, the root certificate file is “root-ca.crt”
keytool -import -alias root -keystore keystore.jks -trustcacerts -file root-ca.crt
5. Import the intermediate certificate into the keystore
In this example, the intermediate certificate file is “intermediate-ca.crt”
keytool -import -alias ica -keystore keystore.jks -trustcacerts -file intermediate-ca.crt
6. Import the issued server certificate into the keystore
In this example, the server certificate file is “server.crt”
keytool -import -alias brekeke -keystore keystore.jks -trustcacerts -file server.crt
7. Go to Brekeke SIP Server Admintool > [Configuration] >[SIP] page, [TLS] section
– Upload the JKS file (keystore.jks) at the [JKS Key File] field
– Set the password of the JKS file (keystore.jks) at the [JKS Password ] field
8. Restart Brekeke SIP Server from Admintool