Created
June 2, 2015 09:15
-
-
Save wbroek/cd87d161b52d0ddba08d to your computer and use it in GitHub Desktop.
Convert cert key to bks for Android SSL Pinning
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/bash | |
if [ "$#" -ne 3 ]; then | |
echo "Usage: importcert.sh <CA cert PEM file> <bouncy castle jar> <keystore pass>" | |
exit 1 | |
fi | |
CACERT=$1 | |
BCJAR=$2 | |
SECRET=$3 | |
TRUSTSTORE=mytruststore.bks | |
ALIAS=`openssl x509 -inform PEM -subject_hash -noout -in $CACERT` | |
if [ -f $TRUSTSTORE ]; then | |
rm $TRUSTSTORE || exit 1 | |
fi | |
echo "Adding certificate to $TRUSTSTORE..." | |
keytool -import -v -trustcacerts -alias $ALIAS \ | |
-file $CACERT \ | |
-keystore $TRUSTSTORE -storetype BKS \ | |
-providerclass org.bouncycastle.jce.provider.BouncyCastleProvider \ | |
-providerpath $BCJAR \ | |
-storepass $SECRET | |
echo "" | |
echo "Added '$CACERT' with alias '$ALIAS' to $TRUSTSTORE..." |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment