poka.sh

 Docs

JKS

Generated by scripts/gen-format-pages.py from docs/data/format-metadata/, FILE_FORMATS.csv and docs/formats-master.csv. Do not edit by hand: change the source, then run the script.

Java Keystore Preview.

At a glance
Purpose A Java keystore (JKS or JCEKS): aliases with private keys, trusted certificates or secret keys, and a SHA-1 integrity MAC.
Extensions .jks
Poka parser poka-jks
Viewer poka-tree-viewer
Depth tier Parser with a shared viewer (see Depth tiers)
Breadth tier B2 Broad (see Breadth tiers)

How much Poka reads

B2 Broad. The common content of the current and the common older versions is decoded. Some named features or versions are not, and are listed.

Confidence: medium (the reviewer read the code). Basis: Reviewed 2026-10-26: read parsers/poka-jks/src/main.rs (403 lines) and plugin.json. No unit tests or tests/samples.rs; the corpus has no .jks, .jceks and .keystore sample. Covers .jks, .jceks and .keystore. The tree shows the type, version and entry counts, and every entry with its alias, kind and creation time; certificates (trusted and in key chains) are decoded with x509-parser (subject, issuer, validity, serial). Judgement: B2: every entry is listed and its certificates decoded; private keys stay encrypted by design.

What Poka does not read

  • Private and secret keys are not decrypted (by design: no password is tried)
  • The trailing integrity MAC is not read or verified
  • BKS and PKCS#12 keystores are refused (the .p12 module reads PKCS#12)

Libraries

Libraries Poka uses or has assessed for this format, with the status, licence and language the registry records.

  • x509-parser (used; MIT OR Apache-2.0; Rust)
  • jks (agusibrahim) (candidate; MIT; Rust; https://docs.rs/crate/jks/0.3.3) — Pure Rust JKS and PKCS12 reader/writer; docs say it supports WebAssembly. Repo: github.com/agusibrahim/jks.
  • pyjks (candidate; MIT; Python; https://pypi.org/project/pyjks/) — Pure Python loader for JKS, JCEKS, BKS and UBER keystores; no JVM needed. Version 20.0.0 (Apr 2020).
  • keystore-go (candidate; MIT; Go; https://github.com/pavlo-v-chernykh/keystore-go) — Go encoder/decoder for Java KeyStore; JKS support inferred from README and decoder source, not stated in full.

Sources

  • parsers/poka-jks/src/main.rs
  • parsers/poka-jks/plugin.json