Keystore Conversion

Using keytool

From JDK 6 the keytool command can be used to convert back and forth between P12 and JKS.

JKS → P12

keytool -importkeystore -srckeystore keystore.jks -srcstoretype JKS -deststoretype PKCS12 -destkeystore keystore.p12

P12 → JKS

keytool -importkeystore -srckeystore keystore.p12 -srcstoretype PKCS12 -deststoretype JKS -destkeystore keystore.jks

Using OpenSSL

OpenSSL can be used to split P12-files into PEM-files.

P12 → PEM

openssl pkcs12 -nocerts -in endentity.p12 -out endentity-key.pem
openssl pkcs12 -nokeys -clcerts -in endentity.p12 -out endentity-cert.pem
openssl pkcs12 -nokeys -cacerts -in endentity.p12 -out endentity-ca.pem
page_revision: 1, last_edited: 1220911193|%e %b %Y, %H:%M %Z (%O ago)
Unless stated otherwise Content of this page is licensed under Creative Commons Attribution-ShareAlike 3.0 License