starred/mkcert

Fork 0

mirror of https://github.com/FiloSottile/mkcert.git synced 2026-04-25 05:26:03 +03:00

[GH-ISSUE #88] [macOS Mojave] ERROR: failed to execute "keytool -list" on "mkcert -install" #47

New issue

Closed

opened 2026-02-25 22:32:28 +03:00 by kerem · 13 comments

kerem commented

2026-02-25 22:32:28 +03:00

Owner

Originally created by @Zorgatone on GitHub (Nov 1, 2018).
Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/88

On macOS Mojave 10.14 (18A391) using iTerm2 Build 3.2.5 and zsh 5.6.2 (x86_64-apple-darwin18.0.0)
and Homebrew 1.8.1 Homebrew/homebrew-core (git revision d338a; last commit 2018-11-01)

Installed mkcert with:

# brew install mkcert
# brew install nss

Then running command mkcert -install fails with:

Created a new local CA at "/Users/tommasoricci/Library/Application Support/mkcert" 💥
The local CA is now installed in the system trust store! ⚡️
The local CA is now installed in the Firefox trust store (requires browser restart)! 🦊
ERROR: failed to execute "keytool -list": fork/exec bin/keytool: no such file or directory

Originally created by @Zorgatone on GitHub (Nov 1, 2018). Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/88 On macOS Mojave 10.14 (18A391) using iTerm2 Build 3.2.5 and zsh 5.6.2 (x86_64-apple-darwin18.0.0) and Homebrew 1.8.1 Homebrew/homebrew-core (git revision d338a; last commit 2018-11-01) Installed mkcert with: ``` # brew install mkcert # brew install nss ``` Then running command `mkcert -install` fails with: ``` Created a new local CA at "/Users/tommasoricci/Library/Application Support/mkcert" 💥 The local CA is now installed in the system trust store! ⚡️ The local CA is now installed in the Firefox trust store (requires browser restart)! 🦊 ERROR: failed to execute "keytool -list": fork/exec bin/keytool: no such file or directory ```

kerem closed this issue

2026-02-25 22:32:28 +03:00

kerem commented

2026-02-25 22:32:28 +03:00

Author

Owner

@adamdecaf commented on GitHub (Nov 6, 2018):

FYI: I'm upgrading macOS and will look at this soon.

@adamdecaf commented on GitHub (Nov 6, 2018): FYI: I'm upgrading macOS and will look at this soon.

kerem commented

2026-02-25 22:32:28 +03:00

Author

Owner

@adamdecaf commented on GitHub (Nov 10, 2018):

Is your JAVA_HOME set? I had to set that (after brew cask install java):

JAVA_HOME=/Library/Java/JavaVirtualMachines/openjdk-11.0.1.jdk/Contents/Home/

@adamdecaf commented on GitHub (Nov 10, 2018): Is your `JAVA_HOME` set? I had to set that (after `brew cask install java`): ``` JAVA_HOME=/Library/Java/JavaVirtualMachines/openjdk-11.0.1.jdk/Contents/Home/ ```

kerem commented

2026-02-25 22:32:28 +03:00

Author

Owner

@adamdecaf commented on GitHub (Nov 10, 2018):

https://github.com/FiloSottile/mkcert/pull/90 shows a better error message in this case

@adamdecaf commented on GitHub (Nov 10, 2018): https://github.com/FiloSottile/mkcert/pull/90 shows a better error message in this case

kerem commented

2026-02-25 22:32:28 +03:00

Author

Owner

@Zorgatone commented on GitHub (Nov 11, 2018):

@adamdecaf it's set in .zshrc but not in .bashrc|.bash-profile|.profile

export JAVA_HOME=/Library/Java/JavaVirtualMachines/jdk1.8.0_152.jdk/Contents/Home

Might this be the issue?
I launched mkcert from zsh shell though, does it matter?

@Zorgatone commented on GitHub (Nov 11, 2018): @adamdecaf it's set in .zshrc but not in .bashrc|.bash-profile|.profile ``` export JAVA_HOME=/Library/Java/JavaVirtualMachines/jdk1.8.0_152.jdk/Contents/Home ``` Might this be the issue? I launched mkcert from zsh shell though, does it matter?

kerem commented

2026-02-25 22:32:28 +03:00

Author

Owner

@adamdecaf commented on GitHub (Nov 13, 2018):

It could be. You could always check the current value with $ echo $JAVA_HOME in your shell.

Can you try running mkcert with JAVA_HOME set explicitly?

$ JAVA_HOME=/Library/Java/JavaVirtualMachines/jdk1.8.0_152.jdk/Contents/Home mkcert -install

@adamdecaf commented on GitHub (Nov 13, 2018): It could be. You could always check the current value with `$ echo $JAVA_HOME` in your shell. Can you try running `mkcert` with JAVA_HOME set explicitly? ``` $ JAVA_HOME=/Library/Java/JavaVirtualMachines/jdk1.8.0_152.jdk/Contents/Home mkcert -install ```

kerem commented

2026-02-25 22:32:28 +03:00

Author

Owner

@Zorgatone commented on GitHub (Nov 14, 2018):

It could be. You could always check the current value with $ echo $JAVA_HOME in your shell.

Can you try running mkcert with JAVA_HOME set explicitly?
$ JAVA_HOME=/Library/Java/JavaVirtualMachines/jdk1.8.0_152.jdk/Contents/Home mkcert -install

Nope, didn't work either (with zsh)
I also tried setting JAVA_HOME in .profile (bash)

Then I also tried to run with bash (also with explicit JAVA_HOME set)

 ~  bash                                                                                                                                                              1 ↵  10013  20:47:56
bash-3.2$ JAVA_HOME=/Library/Java/JavaVirtualMachines/jdk1.8.0_152.jdk/Contents/Home mkcert -install
Using the local CA at "/Users/tommasoricci/Library/Application Support/mkcert" ✨
ERROR: failed to execute "keytool -list": fork/exec bin/keytool: no such file or directory


bash-3.2$

@Zorgatone commented on GitHub (Nov 14, 2018): > It could be. You could always check the current value with `$ echo $JAVA_HOME` in your shell. > > Can you try running `mkcert` with JAVA_HOME set explicitly? > > ``` > $ JAVA_HOME=/Library/Java/JavaVirtualMachines/jdk1.8.0_152.jdk/Contents/Home mkcert -install > ``` Nope, didn't work either (with zsh) I also tried setting JAVA_HOME in `.profile` (bash) Then I also tried to run with bash (also with explicit JAVA_HOME set) ``` ~  bash  1 ↵  10013  20:47:56 bash-3.2$ JAVA_HOME=/Library/Java/JavaVirtualMachines/jdk1.8.0_152.jdk/Contents/Home mkcert -install Using the local CA at "/Users/tommasoricci/Library/Application Support/mkcert" ✨ ERROR: failed to execute "keytool -list": fork/exec bin/keytool: no such file or directory bash-3.2$ ```

kerem commented

2026-02-25 22:32:28 +03:00

Author

Owner

@adamdecaf commented on GitHub (Nov 19, 2018):

Did you make sure $JAVA_HOME/bin/keytool exists and is marked as executable?

@adamdecaf commented on GitHub (Nov 19, 2018): Did you make sure `$JAVA_HOME/bin/keytool` exists and is marked as executable?

kerem commented

2026-02-25 22:32:28 +03:00

Author

Owner

@Zorgatone commented on GitHub (Nov 22, 2018):

ls: /Library/Java/JavaVirtualMachines/jdk1.8.0_152.jdk/Contents/Home/bin/keytool: No such file or directory

Should keytool be installed automatically along with jre/jdk or does it need an additional step to manually install it?

@Zorgatone commented on GitHub (Nov 22, 2018): `ls: /Library/Java/JavaVirtualMachines/jdk1.8.0_152.jdk/Contents/Home/bin/keytool: No such file or directory` Should keytool be installed automatically along with jre/jdk or does it need an additional step to manually install it?

kerem commented

2026-02-25 22:32:28 +03:00

Author

Owner

@Zorgatone commented on GitHub (Nov 22, 2018):

Won't it default to macOS system store if java keytool isn't found?

@Zorgatone commented on GitHub (Nov 22, 2018): Won't it default to macOS system store if java keytool isn't found?

kerem commented

2026-02-25 22:32:28 +03:00

Author

Owner

@adamdecaf commented on GitHub (Nov 23, 2018):

I thought the JRE installs keytool, but I might be wrong for Java 8.

Won't it default to macOS system store if java keytool isn't found?

What "it" are you referring to?

@adamdecaf commented on GitHub (Nov 23, 2018): I thought the JRE installs `keytool`, but I might be wrong for Java 8. > Won't it default to macOS system store if java keytool isn't found? What "it" are you referring to?

kerem commented

2026-02-25 22:32:28 +03:00

Author

Owner

@Zorgatone commented on GitHub (Nov 24, 2018):

I thought the JRE installs keytool, but I might be wrong for Java 8.

Won't it default to macOS system store if java keytool isn't found?

What "it" are you referring to?

I'm referring to the mkcert application, if it checks wheter keytool is in the java path, and if it would fallback to the macOs system store in case it's unavailable

@Zorgatone commented on GitHub (Nov 24, 2018): > I thought the JRE installs `keytool`, but I might be wrong for Java 8. > > > Won't it default to macOS system store if java keytool isn't found? > > What "it" are you referring to? I'm referring to the mkcert application, if it checks wheter keytool is in the java path, and if it would fallback to the macOs system store in case it's unavailable

kerem commented

2026-02-25 22:32:28 +03:00

Author

Owner

@adamdecaf commented on GitHub (Nov 24, 2018):

mkcert installs into the system store regardless if keytool is found or not.

@adamdecaf commented on GitHub (Nov 24, 2018): mkcert installs into the system store regardless if keytool is found or not.

kerem commented

2026-02-25 22:32:28 +03:00

Author

Owner

@FernandoBasso commented on GitHub (Apr 16, 2024):

Leaving my two cents here as it might help others and my future self.

Previous comment says:

I'm referring to the mkcert application, if it checks whether keytool is in the java path, and if it would fallback to the macOs system store in case it's unavailable.

In my case, I had openjdk@11 installed on macOS and JAVA_HOME was set. What I did was simply to unset JAVA_HOME (in the hopes that it would use whatever was available in macOS and not depend on Java stuff) for that shell session:

$ unset JAVA_HOME

mkcert -install worked after that.

@FernandoBasso commented on GitHub (Apr 16, 2024): Leaving my two cents here as it might help others and my future self. Previous comment says: > I'm referring to the `mkcert` application, if it checks whether `keytool` is in the java path, and if it would fallback to the macOs system store in case it's unavailable. In my case, I had `openjdk@11` installed on macOS and `JAVA_HOME` was set. What I did was simply to unset `JAVA_HOME` (in the hopes that it would use whatever was available in macOS and not depend on Java stuff) for that shell session: ``` $ unset JAVA_HOME ``` `mkcert -install` worked after that.

kerem referenced this issue

2026-02-25 22:32:43 +03:00

[GH-ISSUE #233] Installed certificate does not show up in Certificate Trust Settings #148