Convert a JKS file to PKCS12 format (Java 1.6.x and above) keytool \ -importkeystore \ -srckeystore KEYSTORE.jks \ -destkeystore KEYSTORE.p12 \ -srcstoretype JKS \ -deststoretype PKCS12 \ -srcstorepass mysecret \ -deststorepass mysecret \ -srcalias myalias \ -destalias myalias \ -srckeypass mykeypass \ -destkeypass mykeypass \ -noprompt from A few frequently used SSL commands
You aren’t clear which files you combined, but it should work to use openssl to combine the cert and private key to a PKCS#12: cat cert_public_key.pem cert_private_key.pem >combined.pem openssl pkcs12 -export -in combined.pem -out cert.p12 or on the fly but (update:) the privatekey must be first: cat cert_private_key.pem cert_public_key.pem | openssl pkcs12 -export -out cert.p12 … Read more
If using Tomcat 6 and earlier, make sure the keystore password and the key password are same. If using Tomcat 7 and later, make sure they are the same or that the key password is specified in the server.xml file.
Ultimately, .keystore and .jks are just file extensions: it’s up to you to name your files sensibly. Some application use a keystore file stored in $HOME/.keystore: it’s usually implied that it’s a JKS file, since JKS is the default keystore type in the Sun/Oracle Java security provider. Not everyone uses the .jks extension for JKS … Read more
I used the following two steps which I found in the comments/posts linked in the other answers: Step one: Convert the x.509 cert and key to a pkcs12 file openssl pkcs12 -export -in server.crt -inkey server.key \ -out server.p12 -name [some-alias] \ -CAfile ca.crt -caname root Note: Make sure you put a password on the … Read more