本文介绍如何使用keytool将.jks格式的密钥库文件转换为.p12格式，并利用openssl从.p12格式的密钥库中提取证书文件及未加密的密钥文件。
1. Convert our ".jks" file to ".p12" (PKCS12 key store format):
keytool -importkeystore -srckeystore oldkeystore.jks -destkeystore newkeystore.p12 -deststoretype PKCS12
1.1. List new keystore file contents:
keytool -deststoretype PKCS12 -keystore newkeystore.p12 -list
2. Extract pem (certificate) from ".p12" keysotre file:
openssl pkcs12 -nokeys -in newkeystore.p12 -out certfile.pem
3. Extract unencrypted key file from ".p12" keysotre file:
openssl pkcs12 -nocerts -nodes -in newkeystore.p12 -out keyfile.key
keytool -importkeystore -srckeystore oldkeystore.jks -destkeystore newkeystore.p12 -deststoretype PKCS12
1.1. List new keystore file contents:
keytool -deststoretype PKCS12 -keystore newkeystore.p12 -list
2. Extract pem (certificate) from ".p12" keysotre file:
openssl pkcs12 -nokeys -in newkeystore.p12 -out certfile.pem
3. Extract unencrypted key file from ".p12" keysotre file:
openssl pkcs12 -nocerts -nodes -in newkeystore.p12 -out keyfile.key
扫一扫
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
