Download as pdf or txt
Download as pdf or txt
You are on page 1of 4

Java Keytool Commands for Creating and

Importing
These commands allow you to generate a new Java Keytool keystore file, create a CSR, and import certificates.
Any root or intermediate certificates will need to be imported before importing the primary certificate for your

domain.

一. Java Keytool Commands for Creating and Importing


Nav Menu MENU

Home (index.html)
Generate a Java keystore and key pair
Generate CSR
(generator-csr.html)
keytool -genkey -alias mydomain -keyalg RSA -keystore keystore.jks -keysiz

Decode CSR
Generate a certificate signing request (CSR) for an existing Java keystore (decoder-csr.html)

Test SSL Certificate


keytool -certreq -alias mydomain -keystore keystore.jks -file mydomain.csr
(ssl-checker.html)

Convert SSL
Import a root or intermediate CA certificate to an existing Java keystore (convert-ssl.html)

keytool -import -trustcacerts -alias root -file mydomain.crt -keystore key Match SSL (match-
ssl-details.html)

Decode SSL
Import a signed primary certificate to an existing Java keystore (decoder-ssl.html)

Keytool Commands
keytool -import -trustcacerts -alias mydomain -file mydomain.crt -keystore
(keytool-commands.html)

Generate a keystore and self-signed certificate Support FAQS

keytool -genkey -keyalg RSA -alias selfsigned -keystore keystore.jks -stor Generate CSR Guide
(https://www.chinassl.net/gen

Java Keytool Commands for Checking SSL Install Guide


(https://www.chinassl.net/ssl_
Check a stand-alone certificate
Support
(https://www.chinassl.net/hel
keytool -printcert -v -file mydomain.crt

Contact CHAT
Check which certificates are in a Java keystore
LiveZilla Live Chat Software
QQ:405105450
keytool -list -v -keystore keystore.jks
(http://wpa.qq.com/

v=3&uin=405105450
Check a particular keystore entry using an alias
QQ:188285333

keytool -list -v -keystore keystore.jks -alias mydomain (http://wpa.qq.com/

v=3&uin=188285333
QQ:188285666
Other Java Keytool Commands
(http://wpa.qq.com/

Delete a certificate from a Java Keytool keystore v=3&uin=18828566

keytool -delete -alias mydomain -keystore keystore.jks


Change a Java keystore password QQ:188263999

(http://wpa.qq.com/
keytool -storepasswd -new new_storepass -keystore keystore.jks
v=3&uin=188263999

Export a certificate from a keystore 400-186-1871


AM 9:00-PM 18:30
keytool -export -alias mydomain -file mydomain.crt -keystore keystore.jks 24 / 7 / 365

List Trusted CA Certs

keytool -list -v -keystore $JAVA_HOME/jre/lib/security/cacerts

Import New CA into Trusted Certs

keytool -import -trustcacerts -file /path/to/ca/ca.pem -alias CA_ALIAS -ke

keytool
Java Keytool is a key and certificate management utility. It allows users to manage their own public/private key

pairs and certificates. It also allows users to cache certificates. Java Keytool stores the keys and certificates in
what is called a keystore. By default the Java keystore is implemented as a file. It protects private keys with a

password. A Keytool keystore contains the private key and any certificates necessary to complete a chain of
trust and establish the trustworthiness of the primary certificate.
Each certificate in a Java keystore is associated with a unique alias. When creating a Java keystore you will first

create the .jks file that will initially only contain the private key. You will then generate a CSR and have a
certificate generated from it. Then you will import the certificate to the keystore including any root certificates.

Java Keytool also several other functions that allow you to view the details of a certificate or list the certificates

contained in a keystore or export a certificate.

YAHUHOST (https://www.yahuhost.com) Inc Owned Websites


Copyright © CHINASSL (https://www.chinassl.net) Inc 2007-2024 All Rights Reserved.
:400-186-1871
Service Tel Email :sales@chinassl.net
For best browsing recommend to use of IE7.0 and above browser to browse this site

You might also like