keytool

  1. Keystore (Importing file into keystore)
  2. Keytool - import certificate
  3. keytool - import jks into truststore

Convert PKCS#12 file

Example 1

keytool -importkeystore \
 -srckeystore @sharif2008__quick-pass-keystore.bak.p12\
 -srcstoretype pkcs12\
 -srcalias quickpass\
 -destkeystore quickpass.jks\
 -deststoretype jSUB CA Certificates 2016ks\
 -deststorepass 123456\
 -destalias quickpass

Example 2

keytool -importkeystore -srckeystore server.p12 -srcstoretype PKCS12 -destkeystore server.jks -deststoretype JKS

Reference

P12 to JKS

  1. How to convert p12 keystore to jks keystore
  2. security - Need help converting P12 certificate into JKS - Stack Overflow
keytool -importkeystore -srckeystore [MY_FILE.p12] -srcstoretype pkcs12
 -srcalias [ALIAS_SRC] -destkeystore [MY_KEYSTORE.jks]
 -deststoretype jks -deststorepass [PASSWORD_JKS] -destalias [ALIAS_DEST]

Converting cer to jks

keytool -importcert -file "client-ca.cer" -keystore truststore.jks -alias "bcc-ca-client"

Change Alias

keytool -keyclone -alias "bcc-ca-client" -dest "bcc-class-2-sub-ca-g2"  -keystore  ./keystore.jks -storepass 123456

jks to p12

keytool \
  -importkeystore \
  -srckeystore server.jks \
  -destkeystore server.p12 \
  -srcstoretype JKS \
  -deststoretype PKCS12 \
  -srcstorepass 123456 \
  -deststorepass 123456 \
  -noprompt

View JKS files

The Most Common Java Keytool Keystore Commands

keytool -list -v -keystore server.jks

PFX to JKS

keytool -importkeystore -srckeystore server.pfx -srcstoretype pkcs12 -srcalias 1 -srcstorepass 123456 -destkeystore server.jks -deststoretype jks -deststorepass 123456 -destalias 1