what extension should keystore and truststore files should have?

[#1]

Hi ,

As per the link : https://docs.hortonworks.com/HDPDocuments/HDP2/HDP2.3.2/bk_dataintegration/content/enabling_hs2_for_...

truststore are imported into cacerts , as per the below command :

keytool -import -trustcacerts -alias <MyHiveLdaps> -storepass <password> -noprompt -file <myCert>.pem -keystore ${JAVA_HOME}/jre/lib/security/cacerts

When we are connecting to hive beeline using below command , does it accept truststore without .jks extensions?

jdbc:hive2://<host>:<port>/<database>;ssl=true;sslTrustStore=<path-to-truststore>;trustStorePassword=<password>

Thanks

JJ

[#2]

Yes, the extension on the filename should not matter as long as you are using the correct file path.

[#3 · Accepted solution]

If you are using the Java truststore it does not have any file extension name like (jks or pem). So it does not require any extension.

You need to make sure that it is having the right set of permission to access the truststore.