Differences between revisions 6 and 7

SSL + TLS + OPENssl

Links: Linux/OpenSSL
https://wiki.samat.org/CheatSheet/OpenSSL
Create own cert from http://www.sendmail.org/~ca/email/other/cagreg.html

Creating a Digicert UTM certificate.

Create pkcs12 certificate.

openssl pkcs12 -export -inkey user-wild-aes256-4096.key -in Digicert-user_co_za.cer -certfile certs/DigiCertCA.crt -out user-wild-aes256-4096.cer.p12

Check pkcs12 certificate.

openssl pkcs12 -nokeys -in user-wild-aes256-4096.cer.p12 -passin pass:MySeCrEt | less

Java keytool

keytool -list -v -keystore store.jks

Export java jks to p12

      keytool -importkeystore -srckeystore keystore.jks -destkeystore keystore.p12
-deststoretype PKCS12 -srcalias <jkskeyalias> -deststorepass <password>
-destkeypass <password>

openssl export only key or cert

Export certificate using openssl:

      openssl pkcs12 -in keystore.p12  -nokeys -out cert.pem

Export unencrypted private key:

      openssl pkcs12 -in keystore.p12  -nodes -nocerts -out key.pem

...

-  ⇤ ← Revision 6 as of 2017-08-17 23:51:23 → 
  Size: 1026
  Editor: PieterSmit
  Comment:
+   ← Revision 7 as of 2017-08-17 23:53:50 → ⇥
  Size: 1249
  Editor: PieterSmit
  Comment:
-Deletions are marked like this.
+Additions are marked like this.
 Line 23:
+ * Export java jks to p12
   {{{
      keytool -importkeystore -srckeystore keystore.jks -destkeystore keystore.p12
-deststoretype PKCS12 -srcalias <jkskeyalias> -deststorepass <password>
-destkeypass <password>
   }}}