SSL Commands

pem -> p12

openssl pkcs12 -export -in from.pem -inkey privatekey.key -out to.p12

crt -> p12

openssl pkcs12 -export -in from.crt -inkey privatekey.key -out to.p12

p12 -> jks

keytool -importkeystore -srckeystore testserver.p12 -srcstoretype PKCS12 -deststoretype JKS -destkeystore testserver.jks

jks -> p12

keytool -importkeystore -srckeystore testserver.jks -srcstoretype JKS -deststoretype PKCS12 -destkeystore testserver.p12

jks -> nginx

keytool -list -keystore testserver.keystore
keytool -importkeystore -srckeystore testserver.keystore -srcalias test.server.com -destkeystore nginxkeystore.p12 -deststoretype PKCS12
keytool -deststoretype PKCS12 -keystore nginxkeystore.p12 -list
openssl pkcs12 -in nginxkeystore.p12 -nokeys -clcerts -out nginxssl.crt
openssl pkcs12 -in nginxkeystore.p12 -nokeys -cacerts -out gs_intermediate_ca.crt
cat nginxssl.crt gs_intermediate_ca.crt >testnginx.crt
openssl pkcs12 -nocerts -nodes -in nginxkeystore.p12 -out testnginx.key

p12 -> crt

openssl pkcs12 -in testserver.p12 -nokeys -clcerts -out testserver.crt

openssl

openssl genrsa -out server.key 2048
openssl req -new -key server.key -out server.csr
openssl x509 -req -days 3650 -in server.csr -signkey server.key -out server.crt

Common Name: *.xxx.com

References