I have a certificate and a private key.  I used keytool to create a
keystore with the certificate and alias of "tomcat".  keytool does not
seem to provide a way to import a private key.

How can you import a private key into tomcat keystore.

I tried openssl using a command provided by Sudsy.

openssl pkcs12 -export
                 -in <signed_cert_filename>
                 -inkey <private_key_filename>
                 -name <alias>
                 -out <keystore_filename>

However, tomcat failed to negotiate ssl with the browser.  I suspect
there is an incompatibility with openssl and keytool.

Also I do have pem file.

Thanks