create-keystore.sh

keytool -genkey -alias quangnam -keyalg RSA -keysize 2048 -keystore quangnam.jks -dname "CN=localhost,OU=Home,O=Home,L=SL,S=WS,C=LK" -storepass quangnam -keypass quangnam

create-pem-from-cert.sh

openssl x509 -out mycert.crt.pem -outform pem -in mycert.crt -inform der

export-cert.sh

keytool -exportcert -keystore quangnam.jks -file mycert.crt -alias quangnam

export-pfx-from-cert-and-pk.sh

openssl pkcs12 -export -out certificate.pfx -inkey privateKey.key -in certificate.crt -certfile more.crt

export-public-key.sh

keytool -export -alias quangnam -keystore quangnam.jks -file quangnam.pem

export.md

Here is what I do,

First export the key :

keytool -importkeystore -srckeystore mycert.jks -destkeystore keystore.p12 -deststoretype PKCS12

For apache ssl certificate file you need certificate only:

openssl pkcs12 -in keystore.p12 -nokeys -out my_key_store.crt

For ssl key file you need only keys:

openssl pkcs12 -in keystore.p12 -nocerts -nodes -out my_store.key

generate-keystore-from-existing-p12.sh

$JAVA_HOME/bin/keytool -importkeystore -srckeystore quangnam.jks -destkeystore quangnam.p12 -deststoretype PKCS12

generate-keystore-from-existing.sh

keytool -importkeystore -deststorepass an123456 -destkeypass an123456 -destkeystore quangnam-keystore.jks -srckeystore quangnam.jks -srcstorepass quangnam -alias app4

import-public-key.sh

keytool -import -alias quangnam -file quangnam.pem -keystore quangnam-truststore.jks -storepass quangnam