# KeyStore Explorer
KeyStore Explorer is a free GUI replacement for the Java command-line utilities keytool and jarsigner.
Official website: https://keystore-explorer.org/
## Features:
- Create, load, save and convert between various KeyStore types: PKCS#12, JKS, JCEKS, BKS, BCFKS and UBER
- Change KeyStore and KeyStore entry passwords
- Delete or rename KeyStore entries
- Cut/copy/paste KeyStore entries
- Append certificates to key pair certificate chains
- Generate RSA, ECC, DSA, ML-DSA, ML-KEM and SLH-DSA key pairs with self-signed X.509 certificates
- Create CRLs
- Apply X.509 certificate extensions to generated key pairs and Certificate Signing Requests (CSRs)
- View X.509 Certificate, CRL and CRL entry X.509 V3 extensions
- Import and export keys and certificates in many formats: PKCS#12, PKCS#8, PKCS#7, DER/PEM X.509 certificate files, Microsoft PVK, SPC, PKI Path, OpenSSL
- Generate, view and sign CSRs in PKCS #10 and SPKAC formats
- Sign/verify JAR files
- Sign/verify files using CMS/PKCS #7
- Configure a CA Certs KeyStore for use with KeyStore operations
- Password manager for managing KeyStore and KeyStore entry passwords
## Building
A Java Development Kit (JDK) version **17 or higher** is required to build KSE. The build is regularly tested with Java 17, 21 and 25.
To do a clean build, issue the following command from the `kse` directory:
```sh
./gradlew clean build
```
This runs the unit tests and builds the following artifacts:
- `build/libs/kse.jar`
- `build/distributions/kse-.tar`
- `build/distributions/kse-.zip`
You can then update an existing KSE installation by replacing its kse.jar (and if necessary the dependencies) with this one.
Or extract the content of the ZIP/TAR file and use the start scripts from the `bin` directory to run KSE.
The `build.gradle` file contains further instructions for building the platform specific distribution packages.
Especially what the requirements are for executing the build commands.
For the release ZIP package execute the following command (command works only under Windows because it generates kse.exe):
```sh
./gradlew zip
```
For the Windows installer:
```sh
./gradlew innosetup
```
For the macOS application:
```sh
./gradlew appbundler
```
For the RPM package (requires a Linux distribution with rpmbuild installed):
```sh
./gradlew buildRpm
```
For the DEB package (requires Ubuntu/Debian with debhelper installed):
```sh
./gradlew buildDeb
```
For the AppImage package (requires Linux and appimagetool):
```sh
./gradlew buildAppImage
```
## Running
A Java Runtime Environment (JRE) version **17 or higher** is required to run KSE.
To run the application, issue the following command from the `kse` directory:
```sh
./gradlew run
```
Or run `org/kse/KSE.java` directly from an IDE.
## Contributing
We encourage you to contribute to KSE! Please check out the [Contributing to KSE guide](https://github.com/kaikramer/keystore-explorer/blob/main/CONTRIBUTING.md) for guidelines about how to proceed.
## Translating
Please help to translate on the [Weblate translation platform](https://hosted.weblate.org/projects/keystore-explorer/).
Alternatively you can contribute translations directly on GitHub. KSE uses Java resource bundles for translations.
Translators can clone this repository and add their translations to the `kse/src/main/resources/org/kse` subdirectories.
Use the "Resource Bundle Editor" plugin for JetBrains IDEs to simplify the process.
## License
[GNU General Public License v3.0](https://github.com/kaikramer/keystore-explorer/blob/main/LICENSE)
## Sponsors