Skip to content

Basic java keystore cheatsheet

Create a java keystore

keytool -importcert -trustcacerts -file example-cert.pem -alias ca -keystore keystore.jks

List content of the key

keytool -list -v -keystore keystore.jks
 ```

### import .crt and .key files into jks
```bash
openssl pkcs12 -export -in /etc/pki/tls/certs/logstash-forwarder.crt -inkey /etc/pki/tls/private/logstash-forwarder.key -out /etc/pki/tls/keystore/logstash-forwarder.p12

keytool -importkeystore -srckeystore /etc/pki/tls/keystore/logstash-forwarder.p12\
        -srcstoretype PKCS12 \
        -destkeystore /etc/pki/tls/keystore/logstash-forwarder.jks \
        -deststoretype JKS

Get key file content

keytool -v -list -keystore   /etc/pki/tls/keystore/logstash-forwarder.jks