Import an existing RSA Key / CERT into android keystore (PEM Format / PCKS1)

Question

I am trying to import an existing RSA private / public key into the android keystore (Android 7.0.3.2, Emulator).

I have both keys as PCKS 1 inside PEM files. I tried making them a pcks12 file with openssl, but when I try to import those with the below code:

private void getCertsFromP12(String pathToFile, String passphrase){
        try {
            File folder = Environment.getExternalStoragePublicDirectory(Environment.DIRECTORY_DOWNLOADS);
            File myFile = new File(folder, "Tokkey.p12");
            KeyStore p12 = KeyStore.getInstance("pkcs12");
            p12.load(new FileInputStream(myFile), passphrase.toCharArray());
            Enumeration e = p12.aliases();
            while (e.hasMoreElements()) {
                String alias = (String) e.nextElement();
                X509Certificate c = (X509Certificate) p12.getCertificate(alias);
                addCertificateToKeyStore(c);
            }
        }
        catch (Exception e) {

            Log.d(TAG,"error",e);
        }
}

private void addCertificateToKeyStore(X509Certificate c) {
    try {
        KeyStore ks = KeyStore.getInstance("AndroidKeyStore");
        ks.load(null);
        ks.setCertificateEntry("myCertAlias", c);
    } catch (Exception e){}
}

It says file corrupt or password invalid. When I try to install them via the settings, it won't accept any password, constantly telling me its wrong.

I have been bashing my head against this for hours now and would really appreciate some help!

The keys are in the following format:

Are you aware that cert and private key installed via settings go into Android Keychain not AndroidKeystore? Also your code only uses the certificate and ignores the private key, is this what you want? In difference to .Net languages in Java a certificate is just the certificate with it's public key, the private key is a different class. — Robert, Sep 12 '22 at 21:16
Yeah, like I said, I am not very good at this. I need both the private key and the certificate installed in the KeyStore, not the keyChain.... — Martijn Deleij, Sep 12 '22 at 21:17
Then try [this answer](https://stackoverflow.com/a/36805098/150978). Note that is uses DER encoded cert and key, not PEM encoded. You can convert your PEM files to DER files using openSSL (or just apply base64 decode on the part between the `---` lines and save that to a file then it is DER encoded). — Robert, Sep 13 '22 at 07:29

Import an existing RSA Key / CERT into android keystore (PEM Format / PCKS1)

0 Answers0