Question

I am trying to re-sign some jars using the ant task ‘signjar’ however it’s telling me “The signer certificate has expired.”

So I tried to re-generate the keystore hoping this would ‘un-expire’ it…

keytool -genkey -keystore mykeystore -alias myalias

but after entering the keystore password i get: “keytool error: java.lang.Exception: Key pair not generated, alias already exists”

what am i doing wrong? do i need to delete the keystore to re-generate it or is there a simple way to refresh it so it’s not expired?

thanks.

Answer 1

You’re mixing up the terms. A keystore contains keys, a key is something used for signing.

AFAIK, you’re trying to put a new key into an old keystore using an existing alias (name). Why don’t you simply used a new one? Either this or delete the old key from the keystore first. You don’t need to drop the whole keystore.

Have a look at portecle, this simple tool allows you to manipulate the keystore more easily.