PEM to PKCS12

From: Rob Sargent <robjsargent(at)gmail(dot)com>
To: pgsql-jdbc(at)lists(dot)postgresql(dot)org
Subject: PEM to PKCS12
Date: 2021-02-24 23:20:18
Message-ID: f692eab1-388c-c707-42ae-17d7f0055dd6@gmail.com
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-jdbc

Given PEM from AWS/RDS, which appear to me to include only the
certificate, here's what I did to get to PKCS12 format

keytool -import -alias rds-root -keystore root.jks -file rds.pem
keytool -importkeystore -srckeystore root.jks -destkeystore root.p12
-deststoretype pkcs12

Is this expected in general (not RDS specific)? If so I would like to
add these instrux to connect.md.

Or is this even correct? Handing the created .p12 file to the connection
url
(sslkey=/full/path/root.p12&sslpassword=x&sslmode=verify-full)
does not seem to be taking effect. I get could not find
"/home/ec2-user/.postgresql/root.crt"
which is NOT the full/real path

Responses

Browse pgsql-jdbc by date

  From Date Subject
Next Message Rob Sargent 2021-02-25 00:09:09 Re: PEM to PKCS12
Previous Message iceback 2021-02-24 18:40:56 [pgjdbc/pgjdbc] edb446: ssl docs odd wording, misplaced code marker (#2075)