iaik.utils

Class DumpKeyStore

java.lang.Object

iaik.utils.DumpKeyStore

public class DumpKeyStore
extends java.lang.Object

Utility to write the contents of a Java KeyStore to PKCS#12, PKCS#7 and X.509 DER files.

This class may be used to dump through all key and cert entries of a key store and write their keys/certificates to a directory into several formats (PKCS#12, PKCS#7, single X.509).

The key entries (and corresponding certificate chains) are written as PKCS#12, PKCS#7 and X.509 DER files into a keys sub-directory, the certificate entries are written as X.509 DER files into a certs sub-directory.

The same password must be used for the key store and all its key entries.

Usage example:

 java DumpKeyStore keystore.ks certs/ks password IAIKKeyStore
 

Constructor Summary

Constructors

Constructor and Description
DumpKeyStore() Default Constructor.

Method Summary

Modifier and Type	Method and Description
void	dump(java.lang.String keyStoreFile, java.lang.String outDirName, char[] password, java.lang.String keyStoreType) Dumps a key store.
static void	main(java.lang.String[] args) Main method.
static void	saveCertificateChain(X509Certificate[] certChain, java.lang.String fileName, boolean DER_Format, boolean makePKCS7List, boolean fullChain) Saves the supplied certificate chain to the given file.
static void	saveToPKCS12(java.lang.String friendlyName, X509Certificate[] certChain, java.security.PrivateKey privateKey, java.lang.String fileName, boolean DER_Format, char[] password, boolean fullChain) Saves the supplied certificate chain and private key to the given file in PKCS#12 format.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DumpKeyStore

public DumpKeyStore()

Default Constructor.

Method Detail

dump

public void dump(java.lang.String keyStoreFile,
                 java.lang.String outDirName,
                 char[] password,
                 java.lang.String keyStoreType)

Dumps a key store. Dumps through all key and cert entries of the key store and writes their keys/certificates to the outDirName directory into several formats (PKCS#12, PKCS#7, single X.509).

The key entries (and corresponding certificate chains) are written as PKCS#12, PKCS#7 and X.509 DER files into a keys sub-directory, the certificate entries are written as X.509 DER files into a certs sub-directory.

Parameters:

keyStoreFile - the name of the key store file

outDirName - the directory to which to write the PKCS#12, PKCS#7 and cert files

password - the keystore password

keyStoreType - the key store type

saveCertificateChain

public static void saveCertificateChain(X509Certificate[] certChain,
                                        java.lang.String fileName,
                                        boolean DER_Format,
                                        boolean makePKCS7List,
                                        boolean fullChain)
                                 throws java.io.IOException

Saves the supplied certificate chain to the given file.

Parameters:

certChain - the certificate chain to be saved

fileName - the file to write to

DER_Format - true if to save in DER format, false if to save in PEM format

makePKCS7List - whether to save a PKCS7 List or not

fullChain - whether to save the full chain or not

Throws:

java.io.IOException - if an IOException occurs during saving

saveToPKCS12

public static void saveToPKCS12(java.lang.String friendlyName,
                                X509Certificate[] certChain,
                                java.security.PrivateKey privateKey,
                                java.lang.String fileName,
                                boolean DER_Format,
                                char[] password,
                                boolean fullChain)
                         throws java.io.IOException

Saves the supplied certificate chain and private key to the given file in PKCS#12 format.

Parameters:

friendlyName - the friendly name (keystore alias) to be used

certChain - the certificate chain to be saved

privateKey - the private key to be saved

fileName - the file to write to

DER_Format - true if to save in DER format, false if to save in PEM format

password - the password to protect the PKCS#12 file

fullChain - whether to save the full chain or not

Throws:

java.io.IOException

main

public static void main(java.lang.String[] args)

Main method.