Skip to content

Instantly share code, notes, and snippets.

@ilguzin
Last active March 9, 2018 07:46
Show Gist options
  • Save ilguzin/6606011 to your computer and use it in GitHub Desktop.
Save ilguzin/6606011 to your computer and use it in GitHub Desktop.
How to convert Java Key Store file to pem/key for nginx
1. Convert our ".jks" file to ".p12" (PKCS12 key store format):
keytool -importkeystore -srckeystore oldkeystore.jks -destkeystore newkeystore.p12 -deststoretype PKCS12
1.1. List new keystore file contents:
keytool -deststoretype PKCS12 -keystore newkeystore.p12 -list
2. Extract pem (certificate) from ".p12" keysotre file:
openssl pkcs12 -nokeys -in newkeystore.p12 -out certfile.pem
3. Extract unencrypted key file from ".p12" keysotre file:
openssl pkcs12 -nocerts -nodes -in newkeystore.p12 -out keyfile.key
@csahocska
Copy link

awsome! ty

@mdamir
Copy link

mdamir commented Jul 17, 2016

-srcalias is required in step 1 if you want to export a specific alias.

@pantherhead
Copy link

Marvelous!! That worked well.

@cverbiest
Copy link

great , thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment