title: link between private key and signed certificate in keystore
body: <p>I am doing the <code>jetty SSL configuration</code>.</p>
  
  <p>I have created CSR using keytool which  has added a private key to the keystore, </p>
  
  <p>Received the certificate based on the CSR, converted the certificate to DER format and imported the certificate into the keystore as trustcacerts </p>
  
  <p>The signed certificate has the root/intermediate certificates in the certificate path </p>
  
  <p>I also installed the root and intermediate certificate in the IE under the trusted root certificate after converting it into DER format.</p>
  
  <p>while using https , the browser shows certificate error and considers the certificate as self signed certificate.</p>
  
  <p><strong>Question</strong> </p>
  
  <p>Does this mean the the installed signed certificate is not considered since the certificate does not have the Root/intermediate certificate in the certificate path?</p>
  
  <p>Though the signed certificate received from the CA have the link to the root/intermediate certificate in the certificate path.</p>
  
  <p>Please suggest if anything is wrong in the process . Adding the keytool commands followed for this.</p>
  
  <p>Created keystore </p>
  
  <blockquote>
    <p>keytool -keystore serverdns.keystore -alias server -genkey -keyalg RSA
    -keysize 2048</p>
  </blockquote>
  
  <p>create CSR</p>
  
  <blockquote>
    <p>keytool -certreq -alias server -keystore serverdns.keystore -file
    server.csr</p>
  </blockquote>
  
  <p>installing signed certificate</p>
  
  <blockquote>
    <p>keytool -import -trustcacerts -alias cert -keystore serverdns.keystore
    -file signedcert.der.cer</p>
  </blockquote>
  
  <p>I have tried using the same alias 'server' while installing the signed certificate but it failed with the error</p>
  
  <blockquote>
    <p>keytool error: java.lang.Exception: Failed to establish chain from
    reply</p>
  </blockquote>