# Http.p12 structure and use of keytool

**URL:** <https://discuss.elastic.co/t/http-p12-structure-and-use-of-keytool/346325>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [November 2, 2023, 11:04pm UTC](https://discuss.elastic.co/t/http-p12-structure-and-use-of-keytool/346325 "2023-11-02T23:04:35Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![ken33](https://avatars.discourse-cdn.com/v4/letter/k/858c86/32.png) [@ken33](https://discuss.elastic.co/u/ken33)\
**Post date:** [November 2, 2023, 11:04pm UTC](https://discuss.elastic.co/t/http-p12-structure-and-use-of-keytool/346325/1 "2023-11-02T23:04:35Z")

</div>

Hi,

In elasticsearch, I can execute :

```auto
/usr/share/elasticsearch/jdk/bin/keytool -list -keystore http.p12.orig
Enter keystore password:  
Keystore type: PKCS12
Keystore provider: SUN

Your keystore contains 2 entries

http, Nov 2, 2023, PrivateKeyEntry, 
Certificate fingerprint (SHA-256): XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX52:59
http_ca, Nov 2, 2023, PrivateKeyEntry, 
Certificate fingerprint (SHA-256): XXXXXXXXXXXXXXXXXXXXXXXXXXXX:50

```

What means private key entry ?

I want to build a similar file  
I have a ca with ca.crt file and ca.key file.  
How can i build the ca related PrivateKeyEntry in my own file?

Thanks a lot,  
Ken

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 30, 2023, 11:05pm UTC](https://discuss.elastic.co/t/http-p12-structure-and-use-of-keytool/346325/2 "2023-11-30T23:05:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.