How to convert .pfx file to keystore with private key?

by

Using JDK 1.6 or later

It has been pointed out by Justin in the comments below that keytool alone is capable of doing this using the following command (although only in JDK 1.6 and later):

keytool -importkeystore -srckeystore mypfxfile.pfx -srcstoretype pkcs12 
-destkeystore clientcert.jks -deststoretype JKS

Using JDK 1.5 or below

OpenSSL can do it all. This answer on JGuru is the best method that I’ve found so far.

Firstly make sure that you have OpenSSL installed. Many operating systems already have it installed as I found with Mac OS X.

The following two commands convert the pfx file to a format that can be opened as a Java PKCS12 key store: 

openssl pkcs12 -in mypfxfile.pfx -out mypemfile.pem
openssl pkcs12 -export -in mypemfile.pem -out mykeystore.p12 -name "MyCert"

NOTE that the name provided in the second command is the alias of your key in the new key store.

You can verify the contents of the key store using the Java keytool utility with the following command:

keytool -v -list -keystore mykeystore.p12 -storetype pkcs12

Finally if you need to you can convert this to a JKS key store by importing the key store created above into a new key store:

keytool -importkeystore -srckeystore mykeystore.p12 -destkeystore clientcert.jks -srcstoretype pkcs12 -deststoretype JKS

More Related Contents:

  1. How to properly import a selfsigned certificate into Java keystore that is available to all Java applications by default?
  2. Android keystore stopped working
  3. Accept server’s self-signed ssl certificate in Java client
  4. Unable to find valid certification path to requested target – error even after cert imported
  5. why doesn’t java send the client certificate during SSL handshake?
  6. Java SecurityException: signer information does not match
  7. Getting RSA private key from PEM BASE64 Encoded private key file
  8. Trust Store vs Key Store – creating with keytool
  9. PKIX path building failed: unable to find valid certification path to requested target
  10. Importing the private-key/public-certificate pair in the Java KeyStore [duplicate]
  11. How to programmatically set the SSLContext of a JAX-WS client?
  12. Appearance of Java Security dialog
  13. How do I find out what keystore my JVM is using?
  14. How can I get a list of trusted root certificates in Java?
  15. Java keytool easy way to add server cert from url/port
  16. Programmatically Import CA trust cert into existing keystore file without using keytool
  17. What is the certificate enrollment process?
  18. Openssl is not recognized as an internal or external command
  19. Key hash for Facebook Android SDK
  20. How to convert certificate from PEM to JKS?
  21. How do I sign a Java applet for use in a browser?
  22. Reducing android app (apk) size
  23. PKIX path building failed in Java application
  24. How do I do TLS with BouncyCastle?
  25. Self signed X509 Certificate with Bouncy Castle in Java
  26. How to make HTTPS GET call with certificate in Rest-Assured java
  27. Keytool Signing Problem: Keystore was tampered with, or password was incorrect
  28. How to verify a jar signed with jarsigner programmatically
  29. Java Keytool error after importing certificate , “keytool error: java.io.FileNotFoundException & Access Denied”
  30. Can we load multiple Certificates & Keys in a Key Store?

Leave a Comment