PKCS12 on Windows with Java Keystore #13

New issue

Open

opened 2024-01-23 16:36:57 +01:00 by sf · 0 comments

sf commented

2024-01-23 16:36:57 +01:00

Collaborator

PKCS12 files on Windows can not be imported in Java ey store when openssl is too new or the key store too old.

c:\s_tools\cert-proxy-client>c:\s_tools\QTime\Q1\jre\bin\keytool.exe -importkeystore --srckeystore "C:\s_tools\cert-proxy-client\certs\mportal.nexst4.de\bundle.pfx" -keystore "C:\s_tools\cert-proxy-client\certs\mportal.nexst4.de\mportal.keystore" -srcstoretype PKCS12 -destkeystore "C:\s_tools\cert-proxy-client\certs\mportal.nexst4.de\mportal.keystore" -deststoretype JKS -srcstorepass changeme -deststorepass changeme -noprompt
Keytool-Fehler: java.io.IOException: parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48)

Workaround:

Get PEM files on Windows and generate PKCS12 bundle with -legacy option, for example:
openssl pkcs12 -inkey privkey.pem -in fullchain.pem -export -out bundle.pfx -legacy -password pass:changeme

So please add an option to get legacy formatted pkcs12 bundles.

PKCS12 files on Windows can not be imported in Java ey store when openssl is too new or the key store too old. ``` c:\s_tools\cert-proxy-client>c:\s_tools\QTime\Q1\jre\bin\keytool.exe -importkeystore --srckeystore "C:\s_tools\cert-proxy-client\certs\mportal.nexst4.de\bundle.pfx" -keystore "C:\s_tools\cert-proxy-client\certs\mportal.nexst4.de\mportal.keystore" -srcstoretype PKCS12 -destkeystore "C:\s_tools\cert-proxy-client\certs\mportal.nexst4.de\mportal.keystore" -deststoretype JKS -srcstorepass changeme -deststorepass changeme -noprompt Keytool-Fehler: java.io.IOException: parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48) ``` **Workaround:** Get PEM files on Windows and generate PKCS12 bundle with `-legacy` option, for example: `openssl pkcs12 -inkey privkey.pem -in fullchain.pem -export -out bundle.pfx -legacy -password pass:changeme` So please add an option to get legacy formatted pkcs12 bundles.