In this video I will cover :

how to use client certs if you receive them in a p12 or a pem file or as cert and key.
how to extract cert and key from pem file
how to create p12 using base64 encoded cert and key
how to inspect cert is base64 encoded
how to resolve gitbash openssl unable to take input error
how to use winpty
how to export contents of one p12 to another
how to import p12 into another store


02:58 Downloading ICA RCA using browser

05:30 Truststore with certs

06:10 Adding entry using alias

07:18 Deleting entry using alias

08:26 Using truststore and keystore

08:53 If you received only a pem file

09:13 Extract cert and key from pem file

10:33 Base64 decode a cert to verify that it was encoded using website

12:31 Base64 decode a cert to verify that it was encoded using gitbash; cat /dev/clipboard

13:29 Create p12 using cert and key using openssl

14:02 Openssl command stuck in gitbash or gives 'random state error'

14:16 winpty

15:33 Importing p12 into another store

16:29 Using p12 to copy cert and key to another p12 with password same as the store that we want to import it to

18:19 Import p12 to another store

Supporting Links

https://badssl.com/

https://badssl.com/download/

https://stackoverflow.com/questions/1...

https://stackoverflow.com/questions/7...

https://www.thesslstore.com/blog/how...

Commands

keytool.exe list keystore badssl.comclient.p12

keytool.exe import file R3.cer keystore truststore

keytool.exe import file Root_X1.cer alias BADSSL_ROOT_CERT keystore truststore

keytool.exe delete alias mykey keystore truststore

keytool.exe import file R3.cer alias BADSSL_INTERMEDIATE_R3 keystore truststore

winpty openssl pkcs12 export inkey badssl_client_key.pem in badssl_client.crt out badssl_client.p12

keytool.exe importkeystore srckeystore badssl_client.p12 srcstoretype pkcs12 destkeystore new_badssl_client.p12 deststoretype pkcs12

keytool.exe importkeystore srckeystore new_badssl_client.p12 destkeystore truststore srcstoretype pkcs12

Channel #Rahul Random Learnings #RahulRandomLearnings #RahulRandom Learnings Opinion Disclaimer:
The views and opinions expressed here are my own and not the views of my employer.
The content uploaded on my channel is not intended to malign any religion, ethic group, club, organization, company, individual or anyone or anything.