java - convert certificate from pem into jks -


i have convert certificate in pem format java key store.

to use 1 tomcat @ windows server

i've got files:

  • cert_request.csr

    -----begin certificate request----- ... -----end certificate request-----

  • cert_public_key.pem

    -----begin certificate----- ... -----end certificate-----

  • cert_private_key.pem

    -----begin encrypted private key----- ... -----end encrypted private key-----

  • cert.txt

    contains 16 digit key

i tryed combine pem files (by combining 2 files chain together) , converted openssl

  • .der file , import keytool new keystore
  • same .p12
  • directly imported keystore

i tryed change 

    -----begin encrypted private key-----     ...     -----end encrypted private key-----

into 

    -----begin rsa private key-----     ...     -----end rsa private key-----

and tryed 3 ways above

what have working certificate?

edit:

i combinied cert_public_key.pem , cert_private_key.pem cert_comb.pem

    -----begin certificate-----     ...     -----end certificate-----     -----begin encrypted private key-----     ...     -----end encrypted private key-----

you aren't clear files combined, should work use openssl combine cert , private key pkcs#12:

cat cert_public_key.pem cert_private_key.pem | openssl pkcs12 -export -out cert.p12

if cert needs chain cert(s) -- ca should have told when submitted csr , issued cert -- it's easiest include it(them) now.

then (1) some java programs can use pkcs12 directly keystore, (2) if need or prefer jks use keytool:

keytool -importkeystore -srckeystore cert.p12 -srcstoretype pkcs12 -destkeystore cert.jks

if care alias in resulting jks, easiest fix after converting.

also: changing labels in encrypted pem doesn't unencrypt it, nor changing label generic pkcs#8 rsa change data match (and different, though little). if want separate pem file decrypted private key:

openssl pkey -in encryptedpk8 -out clearpk8.pem # 1.0.0 openssl pkcs8 -in encryptedpk8 -out clearpk8.pem # 1.0.0  openssl pkcs8 -topk8 -nocrypt -in encryptedpk8 -out clearpk8.pem # below 1.0.0 openssl rsa -in encryptedpk8 -out clearrsa.pem

Comments

Post a Comment

Popular posts from this blog

Android layout hidden on keyboard show -

i have strange problem layout. when tap on edittext , keyboard shown edittext stay on bottom , when tap on to hide keyboard , keyboard hides , edittext go should when want input text. when tap again, keyboard shown , edittext goes down behind keyboard... <relativelayout android:layout_width="match_parent" android:layout_height="match_parent" > <scrollview android:layout_width="match_parent" android:layout_height="fill_parent" android:above="@+id/rl_commands"> <textview android:layout_width="match_parent" android:layout_height="wrap_content"/> </scrollview> <relativelayout android:layout_width="match_parent android:layout_height="24dp" android:id="@+id/rl_commands" android:alignparentbottom="true">
Read more

google app engine - 403 Forbidden POST - Flask WTForms -

i have flask application running on google app engine. trying submit form built using wtform , keep getting following error. 403 forbidden: don't have permission access requested resource. either read-protected or not readable server. location.html (part of code) <form method=post action="/home/location"> .... <button type="submit" class="btn btn-primary" value="submit"> directions </button> </form> main.py @app.route('/home/location', methods=['post', 'get']) def location(): form = cfcdirections.direction(request.form) print(request.method) if request.method == 'post' , form.validate(): print("after if") directions = cfcdirections() street_no = directions.no street = directions.street suburb = directions.suburb postcode = directions.postcode
Read more

c - Why would PK11_GenerateRandom() return an error -8023? -

i looking through internet trying find source of pk11_generaterandom() function see why function fail. have program uses function when moved new flavor of linux, fails after forking ( fork() ) since not believe there problem nss, suspect doing incorrectly disregarded in older versions of linux new 1 there issue. the openssl package same on 'good' , 'bad' server: openssl 0.9.8e-fips-rhel5 01 jul nss rpm differs though. 'good' has nss-3.12.2.0-2.el5 and bas has version nss-3.15.3-4.el5_10 the 'good' server uses quite obsolete linux: linux 2.6.18-128.el5 #1 smp wed jan 21 08:45:05 est 2009 x86_64 x86_64 x86_64 gnu/linux enterprise linux enterprise linux server release 5.3 (carthage) red hat enterprise linux server release 5.3 (tikanga) the 'bad' server newer: linux bad 2.6.18-371.4.1.el5 #1 smp wed jan 29 11:05:49 pst 2014 x86_64 x86_64 x86_64 gnu/linux oracle linux server release 5.10 red hat enterprise linux server release
Read more