kaikramer / keystore-explorer

KeyStore Explorer is a free GUI replacement for the Java command-line utilities keytool and jarsigner.
https://keystore-explorer.org/
GNU General Public License v3.0
1.7k stars 275 forks source link

Can't Create BKS-V1 Keystore Files #518

Closed andredoubleu closed 3 weeks ago

andredoubleu commented 3 weeks ago

Hi, using KeyStore Explorer, I'm not able to create keystore files of type BKS-V1. Here are the options that I see when I click "Create a new KeyStore". I see "BKS" (which I assume is distinct from BKS-V1), but no "BKS-V1.

image

Likewise, when I try to open a keystore file of type BKS-V1, I get this error:

image

Finally, when I click on "Help -> JARs", I see these jar files:

image

I thought maybe I could just add my bouncycastle jar file to the program, but I can't find any options for doing so.

I'm running on a Mac with these specs:

image

Basically, I need to use BKS-V1 in order to support a legacy Android application, and KeyStore Explorer is the best tool I've been able to find.

Thanks in advance!

kaikramer commented 3 weeks ago

The support for BKS-V1 was removed in KSE version 5.5.2.

But you can simply download an older version of KSE. And those older versions supported BKS-V1 as a separate keystore type (allowing for example conversions between V1 and V2).

andredoubleu commented 3 weeks ago

Thank you, I can confirm that after downgrading to v5.5.1 I was able to create, view, and edit keystores of type BKS-V1. You can consider this ticket closed. By the way, just out of curiosity, what prompted the decision to end support for BKS-V1?

kaikramer commented 3 weeks ago

By the way, just out of curiosity, what prompted the decision to end support for BKS-V1?

Well, first of all there are security issues with BKS-V1, so it should not be used anymore.

But the main reason was that in June 2021 Bouncy Castle 1.69 was released which disabled BKS-V1. It was still possible to re-enable it, but for me this was the signal to remove it - with a delay of one and a half years.