Secure Grafana with HTTPS: Extracting Keys and Certificates

When setting up https for Grafana we need separate files to set the security. One with the certificate chain in PEM format and another with the private key.

Step 1: Convert the JKS keystore to the PKCS12 format. After that it will be easier to extract the certificate chain and the private key.

keytool -importkeystore -srckeystore keystore.jks -destkeystore keystore.p12 -srcstoretype JKS -deststoretype PKCS12 -srcalias er to extract the certificate chain and the private key. -destalias server -srcstorepass 'password' -deststorepass 'password' -srckeypass 'password' -destkeypass 'password'

Step 2: Extract the private key using openssl

openssl pkcs12 -in keystore.p12 -nocerts -nodes -out grafana.key

Step 3: Extract the certificate chain using openssl

openssl pkcs12 -in keystore.p12 -nocerts -nodes -out grafana.key