(Node.js) Convert Java KeyStore to PEM

Loads a Java keystore file and saves the trusted certificate entries to a PEM file.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOSX, and ARM

var os = require('os');
if (os.platform() == 'win32') {  
    if (os.arch() == 'ia32') {
        var chilkat = require('@chilkat/ck-node21-win-ia32');
    } else {
        var chilkat = require('@chilkat/ck-node21-win64'); 
    }
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node21-arm');
    } else if (os.arch() == 'x86') {
        var chilkat = require('@chilkat/ck-node21-linux32');
    } else {
        var chilkat = require('@chilkat/ck-node21-linux64');
    }
} else if (os.platform() == 'darwin') {
    if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node21-mac-m1');
    } else {
        var chilkat = require('@chilkat/ck-node21-macosx');
    }
}

function chilkatExample() {

    // This requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    var jks = new chilkat.JavaKeyStore();

    var jksPassword = "myJksPassword";

    // Load the Java keystore from a file.  The JKS file password is used
    // to verify the keyed digest that is found at the very end of the keystore.
    // It verifies that the keystore has not been modified.
    var success = jks.LoadFile(jksPassword,"/someDir/keyStore.jks");
    if (success !== true) {
        console.log(jks.LastErrorText);
        return;
    }

    // Open/create the output PEM file. 
    // This example uses Chilkat's file access class for writing the output file.
    // You may replace the file I/O lines of code with whatever is most convenient for you.
    var fac = new chilkat.FileAccess();
    success = fac.OpenForWrite("/pemFiles/caCerts.pem");
    if (success !== true) {
        console.log(fac.LastErrorText);
        return;
    }

    var numCerts = jks.NumTrustedCerts;
    var i;

    // cert: Cert
    var cert;
    var pem;

    // Iterate over the trusted certs, get the PEM for each,
    // and append it to the output file.
    i = 0;
    while (i < numCerts) {
        cert = jks.GetTrustedCert(i);

        // Get the certificate in PEM format.  
        pem = cert.ExportCertPem();

        // Append the PEM string to the open file.
        // The PEM contains only us-ascii chars..
        success = fac.AppendAnsi(pem);
        if (success !== true) {
            console.log(fac.LastErrorText);

            return;
        }

        i = i+1;
    }

    // Close the output file.
    fac.FileClose();

    console.log("Trusted certificates saved to PEM.");

}

chilkatExample();