Step-by-Step instructions on transferring SSL certificate between servers.
Of all of the server to server SSL Certificate transfers, moving from the Java Keystore to OpenSSL is by far the easiest. Comprising just a handful of steps, you’ll be done with this in no time—especially with this step-by-step guide.
Note: It might be easier to just create a new CSR in OpenSSL and then reissue your certificate. But this way works, too.
Moving Your Java Keytool SSL Certificate to OpenSSL
- Use the “Keytool” to generate a new private and public key pair.
- Using the same “Keytool,” export the new self-signed certificate from PrivateKeyEntry.
- Display the details of the certificate using the “Keytool.”
- Use “OpenSSL” to view the recently exported certificate.
- Enter “DumpKey.java” to remove the key pair from the “Keytool” keystore.
- Use “OpenSSL” to convert the dumped key pair to Base64.
- Use “OpenSSL” to view the key pair and the converted keystore files.
