如何使用keytool列出存儲在PKCS12密鑰庫中的證書？

Question

我想列出存儲在PKCS12密鑰庫中的證書。

密鑰庫具有擴展.pfx

Answer 1

如果密鑰庫是PKCS12類型（.pfx），你必須與-storetype PKCS12指定：

keytool -list -keystore {path to keystore.pfx} -storepass {password} -storetype PKCS12 -v 

Answer 2

您還可以使用openssl來完成同樣的事情：

$ openssl pkcs12 -nokeys -info -in </path/to/file.pfx> -passin pass:<pfx's password> 

MAC Iteration 2048 
MAC verified OK 
PKCS7 Encrypted data: pbeWithSHA1And40BitRC2-CBC, Iteration 2048 
Certificate bag 
Bag Attributes 
    localKeyID: XX XX XX XX XX XX XX XX XX XX XX XX XX 48 54 A0 47 88 1D 90 
    friendlyName: jedis-server 
subject=/C=US/ST=NC/L=Raleigh/O=XXX Security/OU=XXX/CN=something1 
issuer=/C=US/ST=NC/L=Raleigh/O=XXX Security/OU=XXXX/CN=something1 
-----BEGIN CERTIFICATE----- 
... 
... 
... 
-----END CERTIFICATE----- 
PKCS7 Data 
Shrouded Keybag: pbeWithSHA1And3-KeyTripleDES-CBC, Iteration 2048