keytool -genkey
-alias mydomain -keyalg RSA -keystore keystore.jks -keysize
2048
Generate
a certificate signing request (CSR) for an existing Java keystore:
keytool -certreq
-alias mydomain -keystore keystore.jks -file mydomain.csr
Generate
a keystore and self-signed certificate:
keytool -genkey -keyalg
RSA -alias selfsigned -keystore keystore.jks
-storepass password -validity 360 -keysize 2048
Certificate import commands in keystore:
Import a root CA certificate to an existing
Java keystore:
keytool -import -trustcacerts
-alias root -file root.crt -keystore keystore.jks
Import a
intermediate CA certificate to an existing Java keystore:
keytool -import -trustcacerts
-alias intermediate -file
intermediate.crt -keystore keystore.jks
Import a signed SSL primary certificate to an
existing Java keystore:
keytool -import -trustcacerts
-alias mydomain -file mydomain.crt -keystore keystore.jks
Java Keytool Commands for Conversion:
If you need to change the type of
keystore.
PFX keystore to JKS keystore:
keytool -importkeystore -srckeystore mypfxfile.pfx -srcstoretype
pkcs12 -destkeystore newjkskeystore.jks -deststoretype JKS
JKS keystore to PFX keystore:
keytool -importkeystore
-srckeystore myjksfile.jks -srcstoretype JKS -deststoretype PKCS12
-destkeystore newpfxkeystore.pfx
Other Java Keytool Commands:
Delete a certificate from a Java Keytool keystore:
keytool -delete -alias mydomain -keystore keystore.jks
Change a Java keystore password:
keytool -storepasswd -new newstorepass -keystore keystore.jks
Export a certificate from a keystore:
keytool -export -alias mydomain -file mydomain.crt
-keystore keystore.jks
List Trusted CA Certs:
keytool -list -v -keystore
$JAVA_HOME/jre/lib/security/cacerts
Import New CA into Trusted Certs:
keytool -import -trustcacerts
-file /path/to/ca/ca.pem -alias mydomain -keystore
$JAVA_HOME/jre/lib/security/cacerts
No comments:
Post a Comment