The application is based on Java and Tomcat server. Which type of keystore is better ? does JKS or PCKS12 ? I understand JDK keytool by default creates JSK type then for which uses-cases one should go for PKCS12 type ?
I tried creating PKCS12 keystore but unable to generate CSR using keytool -certq. The command fails with an error - Invalid keystore format.
keytool -certreq -keystore $file -storetype pkcs12
. For recent Suncle Java (8u60 or up) it should work even without storetype, unless you or someone has diddled keystore.type.compat in java.security