Talk:Java KeyStore
Appearance
You CAN get the private key by converting it to a pkcs12 file first, then extracting the private key with something like openssl. This at least works for the keytool bundled with java 1.7.
keytool -importkeystore -srckeystore keystore.jks -destkeystore keystore.p12 -srcstoretype JKS -deststoretype PKCS12 -deststorepass:file p12passfile -srcalias somecert -destalias somecert -srcstorepass:file jkspassfile (otheroptions)
openssl pkcs12 -clcerts -in keystore.p12 -password file:p12passfile -nocerts > somecert.key
More than authorization and public key certs can be stored
KeyStore definitely allows the storage of secret keys, which are not certs at all. — Preceding unsigned comment added by 50.200.93.68 (talk) 15:08, 7 August 2014 (UTC)