Ask a Question

Advanced Search

Solution ID : SO5102

Last Modified : 05/02/2018

Error: "java.lang.exception: failed to establish chain from reply"


When installing an SSL certificate, you may receive the following error message:

Keytool error: java.lang.Exception: Failed to establish chain from reply


This error occurs when one of the following conditions are true:
  • The keystore is missing the correct intermediate certificate


To resolve this issue, download and install the Symantec Intermediate Certificate Authority (CA) Certificates.
Step 1: Download the Symantec Intermediate CA certificate
Step 2: Import the Symantec Intermediate CA certificate using keytool
  1. Copy the Intermediate CA contents into a text file. Be sure to use a text editor such as Notepad or Vi.
  2. For the Intermediate CA, name the file as inter.cer
  3. Use the following command to import this Certificate in the keystore:
    keytool -import -trustcacerts -alias Intermediate -keystore <your_keystore_filename> -file inter.cer
Step 3: Install the SSL certificate
Symantec will email the certificate download link and text. If using the certificate in the body of the email, copy and paste it into a text file using Vi or Notepad. Do not use Microsoft Word or other word processing programs that may add characters.
Enter the following command to import your SSL certificate:

keytool -import -alias <your_alias_name> -keystore <your_keystore_filename> -trustcacerts -file <your_certificate_filename>
NOTE: The alias name in this command must be the same as the alias name used during the generation of the private key and CSR. Once the certificates are imported into the keystore, configure your server.xml to enable SSL
Verify your installation with the Symantec Installation Checker

Tomcat Support
For more information, see the Tomcat Website.