User Tools

Site Tools


tips:java:keystoretopem

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

tips:java:keystoretopem [2009/06/08 11:57] – created eriktips:java:keystoretopem [2010/03/07 11:09] (current) erik
Line 1: Line 1:
 +====== How to convert a JSEE keystore to an OpenSSL PEM? ======
  
 +First, use [[http://homepage.ntlworld.com/wayne_grant/keytool.html|KeyTool GUI]] to export the keystore in a Private Key and Certificates (PKCS#12) format.
 +
 +Second, issue the following command with [[http://www.openssl.org/|OpenSSL]]:
 +
 +  openssl pkcs12 -in file.pfx -out file.pem
 +
 +You might also want to read [[http://erik.thauvin.net/blog/stories.jsp?id=42|this]].
 +
 +===== Comments =====
 +** TJ on Jan 5, 2005 **
 +
 +Like many others I was Gooogling for answers on how to convert a SunJava JKS key-store to another format, in my case the Microsoft PFX format, so the same certificate could be used by Sun's jarsigner.exe and Microsoft's signcode.exe.
 +
 +I ended up writing a couple of small tools, putting a package together, and writing a comptehensive illustrated guide in the hope it'll save others a considerable amount of time and stress working it out.
 +
 +"Trusted Code-Signing for Free!" 
 +
 +Here's how to get and use a FREE trusted Thawte digital certificate to sign your Java JAR and Microsoft CAB code archives, to create trusted applets for downloading over the Internet, and to convert the Java JKS key-store to Microsoft PFX Personal Information Exchange format to share the same certificate with Java JAR files and Microsoft CAB files.
 +
 +http://tjworld.net/software/codesigning/
 +----
 +\\