# java.io.IOException: Invalid keystore format

## post by karl-josef.blaser on Nov 10, 2023

Dear all,

I’ve created a new key- and truststore with a new certificate.

With this new keystore, the Nexus doesn’t work.

This is written in the Nexus-logfile:

ERROR [jetty-main-1] *SYSTEM org.sonatype.nexus.bootstrap.jetty.JettyServer - Failed to start

java.io.IOException: Invalid keystore format

Does anyone have an idea why this is happening?

There are no problems with the other web servers that use this keystore.

## post by tim.mcmahon on Nov 12, 2023

> Convert our Java specific keystore binary "jks" file to a widely compatible PKCS12 keystore “.p12” file:
> 
> keytool -importkeystore -srckeystore keystore.jks -destkeystore example.p12 -deststoretype PKCS12
>
> [Configuring SSL](https://help.sonatype.com/repomanager3/nexus-repository-administration/configuring-ssl#ConfiguringSSL-ServingSSLDirectly)

## post by karl-josef.blaser on Nov 13, 2023

Hi Tim,

thank you for your reply.

I use signed certificates and import a PKCS12 file into the JKS.

Until now, Jetty has always worked with it.

Nothing has been changed about Jetty itself.