Which command converts a JKS keystore to PKCS12?

Which command converts a JKS keystore to PKCS12?

• A. keytool -importkeystore -srckeystore keystore.jks -destkeystore exported.p12 -deststoretype PKCS12
• B. keytool -exportkeystore -srcstoretype PKCS12 -deststoretype JKS
• C. keytool -import -alias mykey -keystore keystore.jks
• D. keytool -list -keystore keystore.jks

Answer: (A)

Converting keystore formats is done with the importkeystore command. It reads entries from a source keystore and writes them into a new destination keystore, allowing a change of format in the process. In this case, the source is a JKS file and the destination is a PKCS12 file, indicated by the destination store type PKCS12. The command effectively migrates all keys and certificates from keystore.jks into a new PKCS12 keystore exported.p12 while preserving the aliases. You can add -srcstoretype JKS to be explicit about the source format. The other options shown don’t perform a format conversion: exporting a keystore doesn’t switch the store type, importing adds a single entry into a keystore, and listing only reads contents.

Converting keystore formats is done with the importkeystore command. It reads entries from a source keystore and writes them into a new destination keystore, allowing a change of format in the process. In this case, the source is a JKS file and the destination is a PKCS12 file, indicated by the destination store type PKCS12. The command effectively migrates all keys and certificates from keystore.jks into a new PKCS12 keystore exported.p12 while preserving the aliases. You can add -srcstoretype JKS to be explicit about the source format. The other options shown don’t perform a format conversion: exporting a keystore doesn’t switch the store type, importing adds a single entry into a keystore, and listing only reads contents.