If you’re working in Java then the Java Key Store is a fairly natural place to store private keys.Java applications typically expect to get the keys they need from JKS, and it’s easy to access from your own Java apps. JKS is not accessible (without jumping through a few hoops) from outside Java, though. PKCS#12 … Read more
If you do have Keytool application and your PKCS#12 file, launch the one-line command: keytool -importkeystore -srckeystore [MY_FILE.p12] -srcstoretype pkcs12 -srcalias [ALIAS_SRC] -destkeystore [MY_KEYSTORE.jks] -deststoretype jks -deststorepass [PASSWORD_JKS] -destalias [ALIAS_DEST] You’ll need to modify these parameters: MY_FILE.p12: indicate the path to the PKCS#12 file (.p12 or .pfx extension) to be converted. MY_KEYSTORE.jks: path to the … Read more
From Java 6 onwards, keytool has an -importkeystore option, which should be able to convert a JKS store into a PKCS#12 store (.p12/.pfx): keytool -importkeystore -srckeystore thekeystore.jks \ -srcstoretype JKS \ -destkeystore thekeystore.pfx \ -deststoretype PKCS12 It will ask you to enter a password for source and destination (jks, pfx) files
The problem seems to be with the wrongly spelled key alias In my case the alias should have been toyanath patro where I wrongly tried to use toyanathpatro . So the best suggestion would be: Don’t use space or invisible character in the key alias. as far as possible There is a small selection button … Read more
Sometimes this error is symptomatic of using an incorrect password for the p12 key.
keytool comes with the JDK installation (in the bin folder): keytool -importcert -file “your.cer” -keystore your.jks -alias “<anything>” This will create a new keystore and add just your certificate to it. So, you can’t convert a certificate to a keystore: you add a certificate to a keystore.
Ok, so here was my process: keytool -list -v -keystore permanent.jks – got me the alias. keytool -export -alias alias_name -file certificate_name -keystore permanent.jks – got me the certificate to import. Then I could import it with the keytool: keytool -import -alias alias_name -file certificate_name -keystore keystore location As @Christian Bongiorno says the alias can’t … Read more
Convert a JKS file to PKCS12 format (Java 1.6.x and above) keytool \ -importkeystore \ -srckeystore KEYSTORE.jks \ -destkeystore KEYSTORE.p12 \ -srcstoretype JKS \ -deststoretype PKCS12 \ -srcstorepass mysecret \ -deststorepass mysecret \ -srcalias myalias \ -destalias myalias \ -srckeypass mykeypass \ -destkeypass mykeypass \ -noprompt from A few frequently used SSL commands
Those file names represent different parts of the key generation and verification process. Please note that the names are just convention, you could just as easily call the files pepperoni.pizza and the content will be the same, so do be conscious of how you use the filenames. A brief primer on PKI – Keys come … Read more
If using Tomcat 6 and earlier, make sure the keystore password and the key password are same. If using Tomcat 7 and later, make sure they are the same or that the key password is specified in the server.xml file.