Ssl – java keystore with multiple aliases on apache

certificatekeystoresslssl-certificate

A JKS file (Java key store), May contains many aliases, this means it may hold many private+public keys combinations, some aliases may be trusted, some not.

When I define jetty to use SSL, as this guide mention ,
I dont set alias. So what happens when there are multiple aliases in the same keystore ?
What aliases is chosen by default ? Because some of them may be trusted, and some of the aliases may not be trusted (and show warning to end-user in the browser).

Thanks

Best Answer

Apache's webserver does not support JKS files directly, you will have to export it's public and private key to to PEM formatted files and explicitly list them per virtual host. This is a one to one so you don't have to worry about what the alias is.

See the Apache Docs for more information.