On this page, the "Prepare the Certificate Keystore" section has the example: openssl pkcs12 -export -infile mycert.crt -inkey mykey.key \ -outfile mycert.p12 -name tomcat -CAfile myCA.crt \ -caname root -chain However, -infile and -outfile aren't valid options for this command (at least for OpenSSL 0.9.7d). The example should use -in and -out: openssl pkcs12 -export -in mycert.crt -inkey mykey.key \ -out mycert.p12 -name tomcat -CAfile myCA.crt \ -caname root -chain