PHP Requires Chilkat v11.0.0+

Convert Java KeyStore to PEM

See more Java KeyStore (JKS) Examples

Loads a Java keystore file and saves the trusted certificate entries to a PEM file. Chilkat2 PHP

<?php

use Chilkat2\Cert;
use Chilkat2\FileAccess;
use Chilkat2\JavaKeyStore;

// This requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

$jks = new JavaKeyStore();

$jksPassword = 'myJksPassword';

// Load the Java keystore from a file.  The JKS file password is used
// to verify the keyed digest that is found at the very end of the keystore.
// It verifies that the keystore has not been modified.
try {
    $jks->LoadFile($jksPassword, '/someDir/keyStore.jks');

    // Open/create the output PEM file.
    // This example uses Chilkat's file access class for writing the output file.
    // You may replace the file I/O lines of code with whatever is most convenient for you.
    $fac = new FileAccess();
    $fac->OpenForWrite('/pemFiles/caCerts.pem');
} catch (\Chilkat2\Exception $e) {
    echo $e->getMessage(), "\n";
    exit;
}

$numCerts = $jks->NumTrustedCerts;

$cert = new Cert();
$pem = '';

// Iterate over the trusted certs, get the PEM for each,
// and append it to the output file.
$i = 0;
while ($i < $numCerts) {
    $jks->TrustedCertAt($i, $cert);

    // Get the certificate in PEM format.
    $pem = $cert->ExportCertPem();

    // Append the PEM string to the open file.
    try {
        $fac->AppendText($pem, 'utf-8');
    } catch (\Chilkat2\Exception $e) {
        echo $e->getMessage(), "\n";
        exit;
    }

    $i = $i + 1;
}

// Close the output file.
$fac->FileClose();

echo "Trusted certificates saved to PEM.\n";