In interactive mode, when it prompts for a password, just press enter and there will be no password set. If you are want to automate that (for example as an ansible command), use the -passout argument. It expects the parameter to be in the form pass:mypassword. Since we want no password: openssl pkcs12 -export -nodes … Read more
There is a very handy GUI tool written in java called portecle which you can use for creation of an empty PKCS#12 keystore and also for an import of the certificate without the private key into the PKCS#12 keystore – this functionality is available under “Import trusted certificate (Ctrl-T)” button. However if you insist on … Read more
I think you have already resolved but I had the same problem. I answer to share my solution. If you have a .p12 file your approach is right. First of all, you have to get the cert and the key separated from the p12 file. As an example, if you have a mycert.p12 file execute … Read more
Convert a JKS file to PKCS12 format (Java 1.6.x and above) keytool \ -importkeystore \ -srckeystore KEYSTORE.jks \ -destkeystore KEYSTORE.p12 \ -srcstoretype JKS \ -deststoretype PKCS12 \ -srcstorepass mysecret \ -deststorepass mysecret \ -srcalias myalias \ -destalias myalias \ -srckeypass mykeypass \ -destkeypass mykeypass \ -noprompt from A few frequently used SSL commands
Those file names represent different parts of the key generation and verification process. Please note that the names are just convention, you could just as easily call the files pepperoni.pizza and the content will be the same, so do be conscious of how you use the filenames. A brief primer on PKI – Keys come … Read more
The openssl documentation says that file supplied as the -in argument must be in PEM format. Turns out that, contrary to the CA’s manual, the certificate returned by the CA which I stored in myCert.cer is not PEM format rather it is PKCS7. In order to create my .p12, I had to first convert the … Read more
If the keystore is PKCS12 type (.pfx) you have to specify it with -storetype PKCS12 (line breaks added for readability): keytool -list -v -keystore <path to keystore.pfx> \ -storepass <password> \ -storetype PKCS12
You can use following commands to extract public/private key from a PKCS#12 container: PKCS#1 Private key openssl pkcs12 -in yourP12File.pfx -nocerts -out privateKey.pem Certificates: openssl pkcs12 -in yourP12File.pfx -clcerts -nokeys -out publicCert.pem
Try: openssl pkcs12 -in path.p12 -out newfile.crt.pem -clcerts -nokeys openssl pkcs12 -in path.p12 -out newfile.key.pem -nocerts -nodes After that you have: certificate in newfile.crt.pem private key in newfile.key.pem To put the certificate and key in the same file without a password, use the following, as an empty password will cause the key to not be … Read more