I need to turn PKI certs into JKSes. I have some instructions from one of the developers, but it refers to a "KeyTool UI" which, it turns out, is not part of the base OS install, but, "Oh, just go out and search the Internet for one..." No thanks. Besides, I'd like to script this stuff. The man page for keytool doesn't help me much, as I know, basically, nothing about this stuff. The terminology is meaningless to me :-( ( Speaking of which, if anyone can direct me to some kind of tutorial or online lesson about the basics of PKI, SSL, etc. that would be awesome! )
So... I'd like to request some assistance in turning the following instructions into CLI 'keytool' commands. After creating a PKCS12 file... 9. Use KeyTool UI (Java tool), go to File->Open Keystore and open certificate.p12 10. Right click on the displayed keypair and Rename it to 'key' 11. Import the COC CA-13 certificate into the new keystore using Tools->Import Trusted Certificate 12. Go to File->Save Keystore As and use 'password' 13. Save the file as subscriber.jks I am told that renaming the keypair is important, as our application cares. Same with using the password 'password'. Thanks, SSL People! -- *********************************************************************** * John Oliver http://www.john-oliver.net/ * * * *********************************************************************** ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org