• 2 replies
  • Latest Post - ‏2011-03-14T09:18:42Z by H2DQ_Julian_Grunnell
24 Posts

Pinned topic extract private key from ikeyman

‏2011-03-10T15:39:16Z |
Hi - were using ikeyman keystores within IHS to store our SSL certificates but does any know how to extract both the certificate and private key from the keystore? I can export the certificate but there is no export private key option. And having a quick google for this seems to suggest it isn't possible for security reasons.

Thanks - Julian.
Updated on 2011-03-14T09:18:42Z at 2011-03-14T09:18:42Z by H2DQ_Julian_Grunnell
  • SystemAdmin
    3908 Posts

    Re: extract private key from ikeyman

    You can't export the key by itself to a file like in the openssl world.

    I'd suggest file/save-as PKCS12 (or export to PKCS12) then "openssl pkcs12 -in ... -pass ... -nocerts -out privkey.pem". The pass protecting the key is the same one that protected the entire KDB. You can add -nodes to output the private key without any encryption wrapped around it.
  • H2DQ_Julian_Grunnell
    24 Posts

    Re: extract private key from ikeyman

    Thanks Eric - that did the trick and got them both out of the ikeyman keystore.