How to Create Keystore and Truststore Files for Secure Communication in the Informatica Domain

How to Create Keystore and Truststore Files for Secure Communication in the Informatica Domain

Step 2. Create Keystore Files

Step 2. Create Keystore Files

Create keystores in PEM and JKS formats with a CRT file and a key file. The keystore files must contain the root and intermediate SSL certificates.
  1. Create the keystore file in PEM format.
    Run the following command:
    $ cat <CRT file> <key file> >> <PEM keystore>
    For example, the following command uses a CRT file named keystore.crt and a key file named keystore.key to create a PEM keystore named infa_keystore.pem:
    $ cat keystore.crt keystore.key >> infa_keystore.pem
    The keystore in PEM format must be named "infa_keystore.pem" and is case sensitive.
  2. Convert the keystore in PEM format to PKCS12 format.
    Run the following command:
    $ openssl pkcs12 -export -in <PEM keystore> -out <PKCS12 keystore> -name <name>
    For example, the following command uses a PEM keystore named infa_keystore.pem to create a PKCS12 keystore named keystore.p12 with the name informatica for the certificate and private key:
    $ openssl pkcs12 -export -in infa_keystore.pem -out keystore.p12 -name "informatica"
  3. Convert the keystore in PKCS12 format to JKS format.
    Run the following command:
    $ keytool -v -importkeystore -srckeystore <PKCS12 keystore> -srcstoretype PKCS12 -keystore <JKS keystore> -storetype JKS -srcalias <alias> -destalias <alias>
    For example, the following command converts a keystore in PKCS12 format named keystore.p12 to a keystore in JKS format named infa_keystore.jks from a source named informatica to a destination named informatica:
    $ keytool -v -importkeystore -srckeystore keystore.p12 -srcstoretype PKCS12 -keystore infa_keystore.jks -storetype JKS -srcalias "informatica" -destalias "informatica"
    The keystore in JKS format must be named "infa_keystore.jks" and is case sensitive.
    The password for the keystore in JKS format must be the same as the private key pass phrase used to generate the SSL key.

0 COMMENTS

We’d like to hear from you!