blocks|key|212611|text|可以使用Java+sdk中的keytool操作密钥库。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|212612|尝试在密钥库上执行keytool，并使用空密码提取证书。之后，将其导入到新的密钥库中。这一次，使用真实的密码。|212613|交换机-exportcert将帮助您实现这一目标。|212614|可能是您更新了java+sdk，因此您无法输入空密码(由于该工具的某些安全升级)。在这种情况下，您可以尝试安装较旧的sdk并执行上述操作。|212615|祝好运!|212616|entityMap^0|E|7|0|0|3|B|0|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@$9|Q|A|R|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|S|8|@]|D|@]|E|$]]|$1|H|3|I|5|6|7|T|8|@$9|U|A|V|B|C]]|D|@]|E|$]]|$1|J|3|K|5|6|7|W|8|@]|D|@]|E|$]]|$1|L|3|M|5|6|7|X|8|@]|D|@]|E|$]]|$1|N|3|-4|5|6|7|Y|8|@]|D|@]|E|$]]]|O|$]]

The keystore can be manipulated using the <code>keytool</code> in the Java sdk.

Try executing the keytool on your keystore, and extract the certificates with the empty password. After that, import it into a new keystore. This time, use a real password.

The switch <code>-exportcert</code> will help you accomplish that.

It could be that you updated your java sdk and therefor you cannot enter empty password (due to some security upgrade of the tool). In that case, you can try to install an older sdk and do the above.

Good luck!

blocks|key|210732|text|您不能对密钥库使用空密码。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|210733|我检查了一下，就JDK1.3keytool不允许的情况，请参阅http://docs.oracle.com/javase/1.3/docs/tooldocs/win32/keytool.html，文档中明确指出：|offset|length|210734|210735|+storepass+的长度必须至少为6个字符。它必须提供给所有访问密钥库内容的命令。对于此类命令，如果在命令行中未提供-storepass选项，则会提示用户输入该选项。|blockquote|style|BOLD|210736|210737|210738|为了好玩，我想尝试一下jdk+1.2中的keytool，并下载了它，因为它的文档没有说明密码是必需的，但我需要一个Windows+NT机器来安装它！我绝对不认为Android曾经使用过这个keytool版本。|210739|很抱歉，您可能忘记了密码，或者在大写锁定的情况下输入了密码，或者激活了错误的键盘布局。:(|210740|编辑：|210741|如果这不是布局问题，您可以尝试|210742|密码：http://metastatic.org/source/JKS.java.|210743|If这不起作用你完蛋了，你唯一的希望就是使用http://code.google.com/p/android-keystore-password-recover/或http://code.google.com/p/patator/暴力破解密钥(测试并使用最快的)|unordered-list-item|210744|210745|entityMap|0|LINK|mutability|MUTABLE|url|http://docs.oracle.com/javase/1.3/docs/tooldocs/win32/keytool.html|1|http://metastatic.org/source/JKS.java|2|http://code.google.com/p/android-keystore-password-recover/|3|http://code.google.com/p/patator/^0|0|V|1U|0|0|0|B|1|0|0|0|0|0|0|0|3|11|1|0|M|1N|2|2A|X|3|0|0^^$0|@$1|2|3|4|5|6|7|1F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1G|8|@]|9|@$D|1H|E|1I|1|1J]]|A|$]]|$1|F|3|-4|5|6|7|1K|8|@]|9|@]|A|$]]|$1|G|3|H|5|I|7|1L|8|@$D|1M|E|1N|J|K]]|9|@]|A|$]]|$1|L|3|-4|5|6|7|1O|8|@]|9|@]|A|$]]|$1|M|3|-4|5|6|7|1P|8|@]|9|@]|A|$]]|$1|N|3|O|5|6|7|1Q|8|@]|9|@]|A|$]]|$1|P|3|Q|5|6|7|1R|8|@]|9|@]|A|$]]|$1|R|3|S|5|6|7|1S|8|@]|9|@]|A|$]]|$1|T|3|U|5|6|7|1T|8|@]|9|@]|A|$]]|$1|V|3|W|5|6|7|1U|8|@]|9|@$D|1V|E|1W|1|1X]]|A|$]]|$1|X|3|Y|5|Z|7|1Y|8|@]|9|@$D|1Z|E|20|1|21]|$D|22|E|23|1|24]]|A|$]]|$1|10|3|-4|5|6|7|25|8|@]|9|@]|A|$]]|$1|11|3|-4|5|6|7|26|8|@]|9|@]|A|$]]]|12|$13|$5|14|15|16|A|$17|18]]|19|$5|14|15|16|A|$17|1A]]|1B|$5|14|15|16|A|$17|1C]]|1D|$5|14|15|16|A|$17|1E]]]]

You cannot use an empty password for your keystore.

I checked, as far as jdk 1.3 keytool does'nt allow it, see <a href="http://docs.oracle.com/javase/1.3/docs/tooldocs/win32/keytool.html" rel="noreferrer">http://docs.oracle.com/javase/1.3/docs/tooldocs/win32/keytool.html</a> where doc explicitely states that:

<blockquote>
 storepass must be at least 6 characters long. It must be provided to all commands that access the keystore contents. For such commands, if a -storepass option is not provided at the command line, the user is prompted for it.
</blockquote>

For fun, I wanted to try keytool from jdk 1.2 and downloaded it since its documentation doesn't state that password is mandatory, but I need a Windows NT box to install it!
I absolutely don't think Android ever used this keytool version.

Sorry, but it looks like you have either: forgotten your password, or typed it with caps locks / a wrong keyboard layout activated. :(

EDIT:

If it is not a layout problem you can try to 

<ul>
<li>Use this reverse engineered code to extract key using an empty string password: <a href="http://metastatic.org/source/JKS.java" rel="noreferrer">http://metastatic.org/source/JKS.java</a>.</li>
<li>If this doesn't work you are screwed, your only hope will be to brute force the key using <a href="http://code.google.com/p/android-keystore-password-recover/" rel="noreferrer">http://code.google.com/p/android-keystore-password-recover/</a> or <a href="http://code.google.com/p/patator/" rel="noreferrer">http://code.google.com/p/patator/</a> (test and use the fastest one)</li>
</ul>

blocks|key|3064656|text|尝试使用默认的android+debug+mode+keystore+password，即android或java+cacerts+default+changeit/changeme。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|3064657|entityMap^0|19|7|22|8|2B|8|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]|$9|K|A|L|B|C]|$9|M|A|N|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|O|8|@]|D|@]|E|$]]]|G|$]]

Try default android debug mode keystore password which is <code>android</code> or java cacerts default <code>changeit</code>/<code>changeme</code>.

blocks|key|2851313|text|如果以上所有方法都失败了，你可以尝试破解它。相关问题：Android+-+Forgot+keystore+password.+Can+I+decrypt+keystore+file?|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|2851314|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/questions/8894987/android-forgot-keystore-password-can-i-decrypt-keystore-file^0|R|1S|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

If all of the above fail you can try cracking it. Related question: <a href="https://stackoverflow.com/questions/8894987/android-forgot-keystore-password-can-i-decrypt-keystore-file">Android - Forgot keystore password. Can I decrypt keystore file?</a>

blocks|key|2851321|text|您可以编写一个简单的Java程序来尝试使用您的密钥或列出别名，而不是使用keytool。应用编程接口应该(不是100%25+)允许您使用空("")密码。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2851322|您还可以尝试使用诸如portecle之类的第三方工具来列出/提取密钥。|2851323|entityMap|0|LINK|mutability|MUTABLE|url|http://portecle.sourceforge.net/^0|1W|2|0|A|8|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@$9|Q|A|R|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|S|8|@]|D|@$9|T|A|U|1|V]]|E|$]]|$1|H|3|-4|5|6|7|W|8|@]|D|@]|E|$]]]|I|$J|$5|K|L|M|E|$N|O]]]]

Instead of using keytool, you could write a simple Java SE program that tries to use your key or lists aliases. The API should (not a 100% on this) allow you to use an empty (<code>&quot;&quot;</code>) password.
You can also try third party tools like <a href="http://portecle.sourceforge.net/" rel="nofollow noreferrer">portecle</a> to list/extract keys.

blocks|key|212687|text|我也遇到了这个问题，这非常奇怪。我有一个不受任何密码保护的遗留密钥库。我可以在SoapUI中成功地使用它，但是keytool和keystore+explorer无法打开它。我必须创建一个已经有密码的新密钥库，从那时起一切都很好。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|212688|我怀疑Java+8比Java+7更挑剔。|212689|keytool+-importkeystore+-srckeystore+client.jks+-destkeystore+client2.jsk+-srcstoretype+JKS+-deststoretype+JKS+-deststorepass+changeit|code-block|syntax|javascript|212690|entityMap|0|LINK|mutability|MUTABLE|url|http://www.keystore-explorer.org/features.html^0|1J|7|1R|H|0|0|0|0^^$0|@$1|2|3|4|5|6|7|U|8|@$9|V|A|W|B|C]]|D|@$9|X|A|Y|1|Z]]|E|$]]|$1|F|3|G|5|6|7|10|8|@]|D|@]|E|$]]|$1|H|3|I|5|J|7|11|8|@]|D|@]|E|$K|L]]|$1|M|3|-4|5|6|7|12|8|@]|D|@]|E|$]]]|N|$O|$5|P|Q|R|E|$S|T]]]]

I faced this issue as well and it was very weird. I had a legacy keystore that was not protected by any password. I could use it successfully in SoapUI but <code>keytool</code> and <a href="http://www.keystore-explorer.org/features.html" rel="nofollow">keystore explorer</a> failed to open it. I had to create new keystore that already had a password and since then everything was fine.

I suspect that Java 8 is more picky that Java 7 was.

<pre><code>keytool -importkeystore -srckeystore client.jks -destkeystore client2.jsk -srcstoretype JKS -deststoretype JKS -deststorepass changeit
</code></pre>

blocks|key|3064708|text|这对我来说很有效：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3064709|keytool+-list+-keystore+keyStoreFileWithotPassword.jks+-protected|code-block|syntax|javascript|3064710|更正:事实证明，list功能无需输入实际密码即可工作！但是，导入功能确实需要密码|offset|length|style|BOLD|3064711|entityMap^0|0|0|8|4|U|2|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Q|8|@$I|R|J|S|K|L]|$I|T|J|U|K|L]]|9|@]|A|$]]|$1|M|3|-4|5|6|7|V|8|@]|9|@]|A|$]]]|N|$]]

That works for me:

<pre><code>keytool -list -keystore keyStoreFileWithotPassword.jks -protected
</code></pre>

CORRECTION: It turn out the list feature works without entering the actual password! But the import features do require a password

blocks|key|2851402|text|在尝试使用hadoop的密钥存储提供程序时，我刚刚遇到了同样的问题，它使用none作为默认密码，请参阅：JavaKeyStoreProvider.java|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2851403|我最终从OpenJDK8复制了原始的keytool，并删除了这个新实现中的限制(它是相同的，但没有6个字符的限制)：KeytoolWithoutPasswordLimits|2851404|通过这种方式，我设法使用none作为密码。|2851405|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/apache/hadoop/blob/rel/release-3.1.1/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/JavaKeyStoreProvider.java#L100|1|http://hg.openjdk.java.net/jdk8/jdk8/jdk/file/687fd7c7986d/src/share/classes/sun/security/tools/keytool/Main.java|2|https://github.com/gumartinm/SparkForFun/blob/01e9273ffe6a017971ed7ec035f9287dff98f872/keytool/src/sun/security/tools/keytool/KeytoolWithoutPasswordLimits.java^0|11|4|1G|P|0|0|I|7|1|1M|S|2|0|C|4|0^^$0|@$1|2|3|4|5|6|7|V|8|@$9|W|A|X|B|C]]|D|@$9|Y|A|Z|1|10]]|E|$]]|$1|F|3|G|5|6|7|11|8|@]|D|@$9|12|A|13|1|14]|$9|15|A|16|1|17]]|E|$]]|$1|H|3|I|5|6|7|18|8|@$9|19|A|1A|B|C]]|D|@]|E|$]]|$1|J|3|-4|5|6|7|1B|8|@]|D|@]|E|$]]]|K|$L|$5|M|N|O|E|$P|Q]]|R|$5|M|N|O|E|$P|S]]|T|$5|M|N|O|E|$P|U]]]]

I've just faced the same problem when trying to use the key store provider for hadoop, which uses <code>none</code> as default password, see: <a href="https://github.com/apache/hadoop/blob/rel/release-3.1.1/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/JavaKeyStoreProvider.java#L100" rel="nofollow noreferrer">JavaKeyStoreProvider.java</a>

I ended up copying the original <a href="http://hg.openjdk.java.net/jdk8/jdk8/jdk/file/687fd7c7986d/src/share/classes/sun/security/tools/keytool/Main.java" rel="nofollow noreferrer">keytool</a> from OpenJDK8 and removed the restrictions in this new implementation (it is the same but without the 6 characteres limitation): <a href="https://github.com/gumartinm/SparkForFun/blob/01e9273ffe6a017971ed7ec035f9287dff98f872/keytool/src/sun/security/tools/keytool/KeytoolWithoutPasswordLimits.java" rel="nofollow noreferrer">KeytoolWithoutPasswordLimits</a>

In this way, I managed to use <code>none</code> as password.

When signing an apk after a long break from Android development I was surprised that I'm no longer able to enter an empty keystore password to unlock it. Is it just me or has this been possible before? If so, when did that change and how can I manage to unlock the keystore anyway?

Some background: maybe I'm just crazy and didn't use an empty password for the keystore before, but the one and only possible password that I could have been using instead doesn't work either (I swear, there's no chance I'd have used another password!).

Using an empty keystore password used to be possible?

Android

Windows

Java

在离开安卓开发很长一段时间后，当我签署一个apk时，我很惊讶我再也不能输入一个空的密钥库密码来解锁它了。是不是只有我，或者这以前是可能的？如果是这样，什么时候发生了变化，我怎么才能解锁keystore呢？一些背景知识:也许我只是疯了，以前没有为keystore使用空密码，但是我可以使用的唯一可能的密码也不起作用(我发誓...

问使用空的密钥库密码曾经是可能的吗？
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问使用空的密钥库密码曾经是可能的吗？EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问使用空的密钥库密码曾经是可能的吗？
EN