I read
http://download.oracle.com/javase/6/docs/technotes/tools/solaris/keytool.html
It says that we can export a CSR file, but no import feature.
I understand that when we create a CSR file, we pass it to the CA, the CA generates the certs to match our CSR and then we import it back again.
Because the CSR is from the keystore, the certs will match the keystore. No problems with imports.
However, what about this.
I have been in the same situation.
If you have lost your key store, this means you have also lost the private key. Of course this private key is not in the CSR in plain text (It is sent to the CA after all!). There is no way of restoring it when the only thing you have is the CSR.
The CSR is generated for one specific private key. In case of a loss the only thing you can do is create a new CSR (with the new key store and new private key - don't lose it this time...) and pay another 200 or so bucks for a CA to sign it. :/
Yeah, my boss was not happy with me. :) You should really make a backup of the key store in some safe place.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With