Importing an Existing certificate into Keystore

I suspected that the keytool couldn't do what I wanted. Thanks for confirming it.

I have written a small Java program which loads a Certificate + Private key contained in a .pfx file into a Keystore. Hopefully someone else may find the source useful

import java.io.FileInputStream;

import java.io.FileOutputStream;

import java.security.Key;

import java.security.KeyStore;

import java.security.Security;

import java.security.cert.Certificate;

import java.util.Enumeration;

class AddCertToKeystore

{

public static void main(String[] args) throws Exception

{

Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());

// Load the pfx file containing Certificate + Private Key

KeyStore temp = KeyStore.getInstance("PKCS12", "SunJSSE");

temp.load(new FileInputStream("C:\\xml\\Alan.pfx"), "password".toCharArray());

// Create a new Keystore

KeyStore keyStore = KeyStore.getInstance("JKS");

keyStore.load(null, "password".toCharArray());

// Find the alias name of the certificate from the pfx file

Enumeration aliasNames = temp.aliases();

String alias = (String) aliasNames.nextElement();

// Get the certificate chain from .pfx

Certificate c[] = temp.getCertificateChain(alias);

Key key = temp.getKey(alias, "password".toCharArray());

// Store the Private Key + Certificate Chain in the Keystore

keyStore.setKeyEntry("Alan Key", key, "password".toCharArray(), c);

// Create the Keystore

keyStore.store(new FileOutputStream("C:\\xml\\alan.keystore"), "password".toCharArray());

}

}

Alan

a.gibsona at 2007-7-16 23:39:42 >