JKS -> PEM & CRT + KEY

jks2pem.sh

#!/usr/bin/env bash

if [[ -z $SUBJECT ]] && [[ -z $1 ]] ; then
  read -p "Subject: " SUBJECT
fi

if [[ -z $PASSPHRASE ]] && [[ -z $2 ]] ; then
  read -p "Passphrase: " PASSPHRASE
fi

subject=${SUBJECT:-$1}
passphrase=${PASSPHRASE:-$2}

keytool -importkeystore \
        -srckeystore $subject.jks \
        -destkeystore $subject.p12 \
        -srcalias $subject \
        -srcstoretype jks \
        -deststoretype pkcs12 \
        -srcstorepass $passphrase \
        -deststorepass $passphrase \
        -no-prompt
openssl pkcs12 -in $subject.p12 -out $subject.pem -passin pass:$passphrase -passout pass:$passphrase
openssl pkey -in $subject.pem -out private.key -passin pass:$passphrase
openssl x509 -in $subject.pem -out public.crt -passin pass:$passphrase