Import crt and key to pkcs12 programmatically

http://stackoverflow.com/questions/11410770/java-load-rsa-public-key-from-file

http://stackoverflow.com/questions/17897819/java-keystore-private-key-import

http://stackoverflow.com/questions/3389143/generate-x509certificate-from-byte

http://stackoverflow.com/questions/19353748/how-to-convert-byte-array-to-privatekey-or-publickey-type

https://secinto.wordpress.com/2013/01/04/convert-pkcs12-to-pfx/

Import crt to p12 to jks programmatically

How to import p12 to jks programmatically

http://www.java2s.com/Code/Java/Security/Importakeycertificatepairfromapkcs12fileintoaregularJKSformatkeystore.htm

http://stackoverflow.com/questions/26196408/keystore-loadinputstream-stream-char-password-how-do-i-know-the-password-o

http://stackoverflow.com/questions/22104680/cant-load-a-jks-file-from-classpath

http://stackoverflow.com/questions/22661757/encrypt-followed-by-decrypt-does-not-return-original-byte-array

http://stackoverflow.com/questions/2091454/byte-to-inputstream-or-outputstream

http://stackoverflow.com/questions/10424817/how-to-convert-byte-type-to-certificate-type-in-java

http://stackoverflow.com/questions/5355466/converting-secret-key-into-a-string-and-vice-versa

http://stackoverflow.com/questions/11465081/convert-base64-string-to-byte-code-in-java

http://stackoverflow.com/questions/793213/getting-the-inputstream-from-a-classpath-resource-xml-file

http://stackoverflow.com/questions/13352972/java-convert-file-to-byte-array-and-visa-versa


http://stackoverflow.com/questions/3614239/pkcs12-java-keystore-from-ca-and-user-certificate-in-java?rq=1


http://stackoverflow.com/questions/24911238/programmatically-import-cer-certificate-into-keystore

Certificate, key and keystore management with OpenSSL and Keytool

SSL certificate management with OpenSSL and  Keytool

1) Generation of self signed key and certificate. There will be two files: root.key and root.crt

openssl req -newkey rsa:2048 -days 3650 -x509 -nodes -out root.crt -keyout root.key

2) Generation of key and certificate for host

openssl req -newkey rsa:1024 -nodes -out ourdomain.csr -keyout ourdomain.key

3) Generate and sign of certificate:

openssl x509 -req -in ourdomain.csr -CA root.crt -CAkey root.key -CAcreateserial -out ourdomain.crt -days 365

4) Export to p12

openssl pkcs12 -export -in ourdomain.crt -inkey ourdomain.key -name somename -CAfile root.crt -caname root -chain -out ourdomain.p12

5) Remove passfrathe from key

openssl rsa -in old.key -out new.key

keytool -import -file firstCA.cert -alias firstCA -keystore myTrustStore

keytool -v -importkeystore -srckeystore alice.p12 -srcstoretype PKCS12 -destkeystore truststore.jks -deststoretype JKS

6) Download certificate from site

echo -n | openssl s_client -connect HOST:PORTNUMBER | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ./1.crt

7) Change pass-phrase

openssl rsa -des3 -in server.key -out server.key.new

8) Export certificate

openssl pkcs12 -in keystore.p12  -nokeys -out cert.pem

9) Export unencrypted private key

openssl pkcs12 -in keystore.p12  -nodes -nocerts -out key.pem

10) List of keys in keystore.jks

keytool -list -v -keystore ./keystore.jks

11) Delete my_server_certificate from keystore.jks

keytool -delete -alias my_server_certificate -keystore ./keystore.jks

12) Import keystore.jks to keystore.p12

keytool -importkeystore -destkeystore ./keystore.jks -srckeystore keystore.p12 -srcstoretype pkcs12 -alias myservercert

=== Other ===

openssl rsa -des3 -in 1.pem -out 2.pem

keytool -import -file ./2.pem -alias local.key -keystore ./keystore.jks

openssl pkcs12 -export -name myservercert -in ^Clfsigned.crt -inkey server.key -out keystore.p12


http://stackoverflow.com/questions/906402/importing-an-existing-x509-certificate-and-private-key-in-java-keystore-to-use-i