PKCS12 on Windows with Java Keystore #13

New issue

Open

opened 2024-01-23 16:36:57 +01:00 by sf · 0 comments

sf commented

2024-01-23 16:36:57 +01:00

Collaborator

PKCS12 files on Windows can not be importet in Java Keystore when openssl is to new or the keystore to old.

 c:\s_tools\cert-proxy-client>c:\s_tools\QTime\Q1\jre\bin\keytool.exe -importkeystore --srckeystore "C:\s_tools\cert-proxy-client\certs\mportal.nexst4.de\bundle.pfx" -keystore "C:\s_tools\cert-proxy-client\certs\mportal.nexst4.de\mportal.keystore" -srcstoretype PKCS12 -destkeystore "C:\s_tools\cert-proxy-client\certs\mportal.nexst4.de\mportal.keystore" -deststoretype JKS -srcstorepass changeme -deststorepass changeme -noprompt
Keytool-Fehler: java.io.IOException: parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48)

Workaround:

Get PEM files on Windows and generate PKCS12 bundle with -legacy option, for example:
openssl pkcs12 -inkey privkey.pem -in fullchain.pem -export -out bundle.pfx -legacy -password pass:changeme

So please add an option to get legacy formated pkcs12 bundles.

PKCS12 files on Windows can not be importet in Java Keystore when openssl is to new or the keystore to old. ``` c:\s_tools\cert-proxy-client>c:\s_tools\QTime\Q1\jre\bin\keytool.exe -importkeystore --srckeystore "C:\s_tools\cert-proxy-client\certs\mportal.nexst4.de\bundle.pfx" -keystore "C:\s_tools\cert-proxy-client\certs\mportal.nexst4.de\mportal.keystore" -srcstoretype PKCS12 -destkeystore "C:\s_tools\cert-proxy-client\certs\mportal.nexst4.de\mportal.keystore" -deststoretype JKS -srcstorepass changeme -deststorepass changeme -noprompt Keytool-Fehler: java.io.IOException: parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48) ``` **Workaround:** Get PEM files on Windows and generate PKCS12 bundle with `-legacy` option, for example: `openssl pkcs12 -inkey privkey.pem -in fullchain.pem -export -out bundle.pfx -legacy -password pass:changeme` So please add an option to get legacy formated pkcs12 bundles.