Question: Java Keytool says keystore using proprietary format about keystore-go HOT 4 CLOSED

@rareddy hi,

This (keystore-go) library is an implementation of Encoder and Decoder for a proprietary Oracle (Sun) file format called jks. keystore tool from the jdk works with several formats: jks, jceks and pkcs12. jks was a default format till jdk9. From the jdk9 default format is pkcs12 and jks is deprecated. So this library is useful if you are working with legacy software that still using jks file format to store certificates and private keys. If you want to work with pkcs12 file format in your golang applications you need appropriate libraries (take a look at https://pkg.go.dev/search?q=pkcs12)

References:

• JEP about switching to pkcs12 in jdk9 http://openjdk.java.net/jeps/229
• KeyStore types supported by the keystore tool: https://docs.oracle.com/javase/7/docs/technotes/guides/security/StandardNames.html#KeyStore
• About Keystore implementation: https://docs.oracle.com/javase/7/docs/technotes/guides/security/crypto/CryptoSpec.html#KeystoreImplementation

P.S. pkcs1 != jks != pkcs12 and so on. And to work with them you need appropriate implementations of a decoder and an encoder.

from keystore-go.

@rareddy hi,

how are things going? do you need any more help?

from keystore-go.

@pavel-v-chernykh Your suggestion was right on, I found "github.com/hetesiistvan/go-pkcs12" which does handle the pkcs12 both keystores and truststores. So, I am trying to rewrite using that. My initial tests were good. Thanks again.

from keystore-go.

@rareddy, happy to help 😃

Wish you good luck with your project!

from keystore-go.