ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

How do you convert a Java Keystore (jks) to a PKCS#12 formatted keystore for use with SslConfig?

book

Article ID: 213726

calendar_today

Updated On:

Products

CA Performance Management - Usage and Administration

Issue/Introduction

How do you convert a Java Keystore (jks) to a PKCS#12 formatted keystore for use with SslConfig?

Environment

Release : All suipported releases of Performance Management

Resolution

keytool -importkeystore -srckeystore [original_keystore.jks] -destkeystore [new_keystore.p12] -srcstoretype JKS -deststoretype PKCS12 -deststorepass [passwordForNew_Keystore]

List of example parameters:

original_keystore.jks: path to the keystore that you want to convert.
new_keystore.p12: path to the PKCS#12 file (.p12 or .pfx extension) that will be created.
passwordForNew_Keystore: The password that will be requested for access to the new p12 keystore.

Additional Information

From here you can view the new_keystore.p12 contents with either of the two following commands:

keytool -list -v -keystore new_keystore.p12 -storepass passwordForNew_Keystore
openssl pkcs12 -info -in new_keystore.p12 -nodes