CkPython

Change Password for Java KeyStore File

See more Java KeyStore (JKS) Examples

Demonstrates how to load a Java keystore, change the password, and save using the new password. If the Java keystore contains only trusted root certificates, then it's simply a matter of loading the JKS with the existing password, and then saving with a new password. If the JKS contains private key entries, then each private key entry must be re-keyed using the new password by calling the ChangePassword method. CkPython

import sys
import chilkat

success = False

# This requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

jks = chilkat.CkJavaKeyStore()

oldJksPassword = "existingPassword"
newJksPassword = "newPassword"
jksPath = "/someDir/keyStore.jks"

# Load the Java keystore from a file.
success = jks.LoadFile(oldJksPassword,jksPath)
if (success != True):
    print(jks.lastErrorText())
    sys.exit()

# If the JKS contains private key entries, then each
# must be re-keyed with the new password by calling ChangePassword.
numPrivateKeys = jks.get_NumPrivateKeys()

i = 0
while i < numPrivateKeys :

    success = jks.ChangePassword(i,oldJksPassword,newJksPassword)
    if (success != True):
        print(jks.lastErrorText())
        sys.exit()

    i = i + 1

# Write the JKS using the new password for the JKS file's keyed digest.
success = jks.ToFile(newJksPassword,jksPath)
if (success != True):
    print(jks.lastErrorText())
    sys.exit()

print("Updated the password for the Java keystore file.")