"Error: Cannot recover key" when keystore and private key passwords are different

[jbestie]

When I try to read the cert/private key from JKS which has different passwords for keystore and private key via

const jks = require('jks-js');

const keystore = jks.toPem(
	fs.readFileSync('keystore.jks'),
	'password'
);

I receive the "Error: Cannot recover key"-error.

As far as I understand it's because of toPem-function uses the keystore password to decode a private key and doesn't provide a possibility to specify private key password if it's different.

Is there any possibility to work with such keystore via jks-js without changes in source code and selling the soul to Devil?

Thanks in advance!

[lenchv]

Hi @jbestie !

Well, probably to solve the issue, here should be another password:

https://github.com/lenchv/jks-js/blob/master/lib/index.js#L55

I'll try to make changes and release as soon as possible and let you know.

[jbestie]

@lenchv thanks a lot for your reply!

Meanwhile I've realized that my issue can be solved via parseJks with a few lines of code instead of single one (it was unclear a bit from documentation that this function provides everything I need but thanks to source code - I've figured out how to deal with) :

 // read the JKS
    const keystoreData = jks.parseJks( fs.readFileSync('keystore/server.keystore'), 'changeit1');

// decrypt private key you need
keystoreData.forEach( entry => {
        console.log(jks.decrypt(entry.protectedPrivateKey, 'changeit2'));
        const payload = entry.chain[0].value; // dummy retrieving the certificate data
        .... magic to reformat data into suitable base64
    })

So I believe this issue can be closed.

[elesinn]

Hello, I faced with the same problem.
Is there a fix planned? Or should we use @jbestie solution?

[lenchv]

Hi @elesinn! Yeahh, I didn't fix it, I thought as long as issue closed it is resolved. But as it is common issue, I reopened the issue and I'm going to fix it later. For now, use proposed solution

[elesinn]

Ok, @lenchv thanks for the quick answer and very helpful library