密鑰對格式轉換：JKS到PEM

此處腳本用途：Tomcat的JKS轉換成Nginx的PEM格式。

#!/bin/bash

export JKS=$1
export PASS=$2

NAME=$(basename "$JKS")
TODIR="$PWD/$NAME-pem"

mkdir -p "$TODIR"

set -x

keytool -importkeystore -srcstoretype jks -deststoretype pkcs12 -srcstorepass:env PASS -deststorepass:env PASS -srckeystore "$JKS" -destkeystore "$TODIR/pkcs12.p12"

openssl pkcs12 -nocerts -nodes  -passin  env:PASS -in "$TODIR/pkcs12.p12"  -out "$TODIR/server.key"
openssl pkcs12 -nokeys -clcerts -passin  env:PASS -in "$TODIR/pkcs12.p12"  -out "$TODIR/server.crt"
openssl pkcs12 -nokeys -cacerts -passin  env:PASS -in "$TODIR/pkcs12.p12"  -out "$TODIR/ca.crt"

使用示例：

./jsk_2_pem.sh  <JSK_STORE_FILE>  <JSK_STORE_PASSWORD>

　　

參考

• https://www.cnblogs.com/FoChen/p/4583313.html