KeyTool Permission Error setting up https

[Dob4115]

I'm trying to create a self-signed cert per https://doc.mbse-syson.org/syson/v2024.11.0/installation-guide/how-tos/https.html But when I run keytool, after inputing my information, I get a permission error and the cert is not created.

I'm using docker, running keytool from the shell connected via portainer. 2026.07.0 image.

[AxelRICHARD]

Hello,
Thank you for using SysON.
The keytool application is not provided by SysON, and without more detailed information I can't help you. You should find a lot of help on the web about your problem.
By the way, if you are using SysON 2026.7.0, you should go to the 2026.7.0 version of the documentation: https://doc.mbse-syson.org/syson/v2026.7.0/installation-guide/how-tos/https.html

Regards,

[Dob4115]

ok. Not sure what information would help.

I've already searched the web for keytool permission errors, which led to me trying to run keytool from the java/bin directory (no change), checking the permissions on cacerts (-rw-r--r-- 1 root root 187607 Jan 21 2026 /opt/java/openjdk/lib/security/cacerts), and trying to sudo to gain permission (but the linux install doesnt have sudo?).

The error text I get is: keytool error: java.io.FileNotFoundException: keystore.jks (Permission denied)

[pcdavid]

I'm using docker, running keytool from the shell connected via portainer

I don't know about portainer, but in the instructions in the documentation, the keytool invocation is supposed to be done (once) outside of any Docker container, on your own system. There you should have no issue generating the keystore.jks file.

Once the file exists, it can then be mounted inside the Docker containe using a volume:

    volumes:
      - ./keystore.jks:/keystore.jks

The file is then accessible to the JVM running inside the container, and you can point the application (via --server.ssl.key-store=) to the location inside the container where it can find it.

[Dob4115]

That was the problem. I actually was wondering where the key file should be made and placed. I did what you suggested and now I can create new projects. Thanks!