Filter
Top Products
■
Create a self-signed certicate in a keystore of type JKS using an RSA key algorithm. RSA is
public-key encryption technology developed by RSA Data Security, Inc. The acronym
stands for Rivest, Shamir, and Adelman, the inventors of the technology.
keytool -genkey -noprompt -trustcacerts -keyalg RSA -alias ${cert.alias}
-dname ${dn.name} -keypass ${key.pass} -keystore ${keystore.file}
-storepass ${keystore.pass}
Another example of creating a certicate is shown in “Generating a Certicate Using the
keytool Utility” on page 114
.
■
Create a self-signed certicate in a keystore of type JKS using the default key algorithm.
keytool -genkey -noprompt -trustcacerts -alias ${cert.alias} -dname
${dn.name} -keypass ${key.pass} -keystore ${keystore.file} -storepass
${keystore.pass}
An example of signing a certicate is shown in “Signing a Digital Certicate Using the
keytool Utility” on page 115
■
Display available certicates from a keystore of type JKS.
keytool -list -v -keystore ${keystore.file} -storepass ${keystore.pass}
■
Display certicate information from a keystore of type JKS.
keytool -list -v -alias ${cert.alias} -keystore ${keystore.file}
-storepass ${keystore.pass}
■
Import an RFC/text-formatted certicate into a JKS store. Certicates are often stored using
the printable encoding format dened by the Internet RFC (Request for Comments) 1421
standard instead of their binary encoding. This certicate format, also known as Base 64
encoding, facilitates exporting certicates to other applications by email or through some
other mechanism.
keytool -import -noprompt -trustcacerts -alias ${cert.alias} -file
${cert.file} -keystore ${keystore.file} -storepass ${keystore.pass}
■
Export a certicate from a keystore of type JKS in PKCS7 format. The reply format dened
by the Public Key Cryptography Standards #7, Cryptographic Message Syntax Standard,
includes the supporting certicate chain in addition to the issued certicate.
keytool -export -noprompt -alias ${cert.alias} -file ${cert.file}
-keystore ${keystore.file} -storepass ${keystore.pass}
■
Export a certicate from a keystore of type JKS in RFC/text format.
keytool -export -noprompt -rfc -alias ${cert.alias} -file
${cert.file} -keystore ${keystore.file} -storepass ${keystore.pass}
■
Delete a certicate from a keystore of type JKS.
UsingJavaSecure SocketExtension(JSSE)Tools
Chapter9 • ConguringSecurity 113