programatically reading java keystore file jceks using openssl

Question

I am trying to do the AES encryption/decryption in java

I generated the secretkey using KeyGenerator. I stored the key using java keystore.

        Key myKey = KeyGenerator.getInstance("AES").generateKey();

        KeyStore.ProtectionParameter protParam =
                new KeyStore.PasswordProtection("secretpass".toCharArray());

        //For writing the secret Key
        KeyStore.SecretKeyEntry skEntry =
                new KeyStore.SecretKeyEntry((SecretKey)myKey);
        FileOutputStream fout = new FileOutputStream("test.ks");

        KeyStore ksout = KeyStore.getInstance("JCEKS");
        ksout.load(null,"changeit".toCharArray());
        ksout.setEntry("secretalias", skEntry, protParam);

I wanted to get this secretkey from this file using openssl programatically. Is it possible? If so, please give me some suggestions on how do I proceed.

Thank you in advance.

Uwe Plonus · Accepted Answer · 2014-09-16 11:26:18Z

1

This is not possible as the default keystore (jks) is a proprietary format used by Java.

To exchange the key you would need something portable like PKCS#11 (which is a supported KeyStore format at least in Java 8).

answered Sep 16, 2014 at 11:26

Uwe Plonus

9,9944 gold badges46 silver badges49 bronze badges

Sign up to request clarification or add additional context in comments.

6 Comments

Giridhar Over a year ago

Thank you for the quick response. Is there any other way to do this ... I mean, any other standard way to achieve the exchange of key between java components and c++ components (which uses openssl).

user207421 Over a year ago

@Gridahr He's just told you the answer to that. PKCS#11.

President James K. Polk Over a year ago

Where does it say that PKCS#11 is a supported keystore in Java 8? Not here.

Uwe Plonus Over a year ago

@GregS Look here.

President James K. Polk Over a year ago

@UwePlonus: Those are the reserved names, nothing more. It doesn't mean that Oracle has a provider implementation of it. And they don't.

|

Collectives™ on Stack Overflow

programatically reading java keystore file jceks using openssl

1 Answer 1

6 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

6 Comments

Your Answer

Sign up or log in

Post as a guest

Related