pyjks_keystore_load_and_iterate_keys_certificates.py

1import jks
2
3ks = jks.KeyStore.load("keystore.jks", "store-password")
4
5# Private keys
6for alias, pk in ks.private_keys.items():
7    print("Private key: %s" % pk.alias)
8    if pk.algorithm_oid:
9        print("  Algorithm OID: %s" % pk.algorithm_oid)
10    print("  Key: %s" % pk.key)
11    for c in pk.cert_chain:
12        print("  Certificate type: %s" % c[0])
13        print("  Certificate: %s" % c[1])
14
15# Trusted certificates
16for alias, c in ks.trusted_certs.items():
17    print("Trusted certificate: %s" % c.alias)
18    print("  Certificate type: %s" % c.type)
19    print("  Certificate: %s" % c.cert)