p12(PKCS12)和jks互相轉換

p12 -> jks

keytool -importkeystore -srckeystore keystore.p12 -srcstoretype PKCS12 -deststoretype JKS -destkeystore keystore.jks

jks -> p12

keytool -importkeystore -srckeystore keystore.jks -srcstoretype JKS
-deststoretype PKCS12 -destkeystore keystore.p12

 

從jks里面導出cert

keytool -export -alias cert0001 -keystore trust.jks -storepass 123456 -file cert0001.cer

將cert導入jks

keytool -import -v -alias cert001 -file cert001.cer -keystore trust.jks -storepass 123456 -noprompt 

去除pem格式的key的密碼(輸出的密碼不輸入即可)

openssl rsa -in cert2.key -out cert22.key

合並pem格式輸出pfx(p12)

openssl pkcs12 -export -inkey cert22.key -in cert2.crt -out cert2.pfx

指定intermedian和CA

openssl pkcs12 -export -out mypkcs12.pfx -inkey my.private.key -in mycert.crt -certfile intermediate.crt -CAfile ca.crt 

 

pfx轉回pem

openssl pkcs12 -in cert2.pfx -out cert22.pem -nodes

pem轉key

openssl rsa -in cert22.pem -out cert22.key

pem轉crt

openssl x509 -in cert22.pem -out cert22.crt

cert轉pem

openssl x509 -in cert2.cer -out cert2.pem -outform PEM

 pem轉der

openssl x509 -in cert22.pem -inform PEM -out cert22.der -outform DER

der轉pem

openssl x509 -in cert22.cer -inform DER -out cert22.pem -outform  PEM