将公共证书、私钥和证书链 .pem 文件转换为 jks 密钥库

Question

I have 3 separate .pem files:

publicCert.pem
privateKey.pem
CertificateChain.pem

I want to put these into a new java keystore.

I have seen this question asked and answered before, but with only 1 or 2 .pem files, not 3, and not specifically for a new jks.

Additionally the other web servers run on IIS, and are using SSL with a wildcard domain. example: *domain.com

Can I create a jks for a wildcard domain? Looks like that may be tricky?

Commands appreciated!

Answer 1

Build a PKCS12 file, then use Java's Keytool to convert to a Java keystore.

openssl pkcs12 -export -chain -inkey privateKey.pem -CAfile CertificateChain.pem -in publicCert.pem -out myp12file.p12

keytool -importkeystore -destkeystore mykeystore.jks -srckeystore myp12file.p12 -srcstoretype pkcs12 -destalias mykey -srcalias 1

It will ask you for passwords, too.

Answer 2

I have just one file: name.jks. I would like to have cafile.pem, certfile.pem and keyfile.pem. How can I get it?