Perl

Change Password for Java KeyStore File

See more Java KeyStore (JKS) Examples

Demonstrates how to load a Java keystore, change the password, and save using the new password. If the Java keystore contains only trusted root certificates, then it's simply a matter of loading the JKS with the existing password, and then saving with a new password. If the JKS contains private key entries, then each private key entry must be re-keyed using the new password by calling the ChangePassword method. Perl

use chilkat();

$success = 0;

# This requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

$jks = chilkat::CkJavaKeyStore->new();

$oldJksPassword = "existingPassword";
$newJksPassword = "newPassword";
$jksPath = "/someDir/keyStore.jks";

# Load the Java keystore from a file.
$success = $jks->LoadFile($oldJksPassword,$jksPath);
if ($success != 1) {
    print $jks->lastErrorText() . "\r\n";
    exit;
}

# If the JKS contains private key entries, then each
# must be re-keyed with the new password by calling ChangePassword.
$numPrivateKeys = $jks->get_NumPrivateKeys();

$i = 0;
while ($i < $numPrivateKeys) {

    $success = $jks->ChangePassword($i,$oldJksPassword,$newJksPassword);
    if ($success != 1) {
        print $jks->lastErrorText() . "\r\n";
        exit;
    }

    $i = $i + 1;
}

# Write the JKS using the new password for the JKS file's keyed digest.
$success = $jks->ToFile($newJksPassword,$jksPath);
if ($success != 1) {
    print $jks->lastErrorText() . "\r\n";
    exit;
}

print "Updated the password for the Java keystore file." . "\r\n";