Perl Requires Chilkat v11.0.0+

Convert Java KeyStore to PEM

See more Java KeyStore (JKS) Examples

Loads a Java keystore file and saves the trusted certificate entries to a PEM file. Chilkat2 Perl

use strict;
use warnings;
use Chilkat2;

# This requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

my $jks = Chilkat2::JavaKeyStore->new;

my $jksPassword = 'myJksPassword';

# Load the Java keystore from a file.  The JKS file password is used
# to verify the keyed digest that is found at the very end of the keystore.
# It verifies that the keystore has not been modified.
my $success = $jks->LoadFile($jksPassword, '/someDir/keyStore.jks');
if (!$success) {
    print $jks->LastErrorText, "\n";
    exit;
}

# Open/create the output PEM file.
# This example uses Chilkat's file access class for writing the output file.
# You may replace the file I/O lines of code with whatever is most convenient for you.
my $fac = Chilkat2::FileAccess->new;
$success = $fac->OpenForWrite('/pemFiles/caCerts.pem');
if (!$success) {
    print $fac->LastErrorText, "\n";
    exit;
}

my $numCerts = $jks->NumTrustedCerts;

my $cert = Chilkat2::Cert->new;
my $pem = '';

# Iterate over the trusted certs, get the PEM for each,
# and append it to the output file.
my $i = 0;
while ($i < $numCerts) {
    $jks->TrustedCertAt($i, $cert);

    # Get the certificate in PEM format.
    $pem = $cert->ExportCertPem();

    # Append the PEM string to the open file.
    $success = $fac->AppendText($pem, 'utf-8');
    if (!$success) {
        print $fac->LastErrorText, "\n";
        exit;
    }

    $i = $i + 1;
}

# Close the output file.
$fac->FileClose();

print "Trusted certificates saved to PEM.\n";