question Re: what extension should keystore and truststore files should have? in Archives of Support Questions (Read Only)

what extension should keystore and truststore files should have?

Jacqueline — Fri, 17 Mar 2017 01:18:45 GMT

Hi ,

truststore are imported into cacerts , as per the below command :

keytool -import -trustcacerts -alias <MyHiveLdaps> -storepass <password> -noprompt -file <myCert>.pem -keystore ${JAVA_HOME}/jre/lib/security/cacerts

When we are connecting to hive beeline using below command , does it accept truststore without .jks extensions?

jdbc:hive2://<host>:<port>/<database>;ssl=true;sslTrustStore=<path-to-truststore>;trustStorePassword=<password>

Thanks

deepesh1 — Fri, 17 Mar 2017 07:20:32 GMT

Yes, the extension on the filename should not matter as long as you are using the correct file path.

Kartik_Agarwal — Thu, 30 Sep 2021 06:34:58 GMT

If you are using the Java truststore it does not have any file extension name like (jks or pem). So it does not require any extension.

You need to make sure that it is having the right set of permission to access the truststore.