keytool使用大全：p12(PKCS12)和jks互相转换等

原文:https://www.cnblogs.com/got-my-way/p/6256306.html

p12 -> jks

keytool -importkeystore -srckeystore keystore.p12 -srcstoretype PKCS12 -deststoretype JKS -destkeystore keystore.jks

jks -> p12

keytool -importkeystore -srckeystore keystore.jks -srcstoretype JKS
-deststoretype PKCS12 -destkeystore keystore.p12

从jks里面导出cert

keytool -export -alias cert0001 -keystore trust.jks -storepass 123456 -file cert0001.cer

将cert导入jks

keytool -import -v -alias cert001 -file cert001.cer -keystore trust.jks -storepass 123456 -noprompt 

去除pem格式的key的密码(输出的密码不输入即可)

openssl rsa -in cert2.key -out cert22.key

合并pem格式输出pfx(p12)

openssl pkcs12 -export -inkey cert22.key -in cert2.crt -out cert2.pfx

指定intermedian和CA

openssl pkcs12 -export -out mypkcs12.pfx -inkey my.private.key -in mycert.crt -certfile intermediate.crt -CAfile ca.crt 

pfx转回pem

openssl pkcs12 -in cert2.pfx -out cert22.pem -nodes

pem转key

openssl rsa -in cert22.pem -out cert22.key

pem转crt

openssl x509 -in cert22.pem -out cert22.crt

cert转pem

openssl x509 -in cert2.cer -out cert2.pem -outform PEM

 pem转der

openssl x509 -in cert22.pem -inform PEM -out cert22.der -outform DER

der转pem

openssl x509 -in cert22.cer -inform DER -out cert22.pem -outform  PEM