Professional Documents
Culture Documents
The Most Common Java Keytool Keystore Commands-CHINASSL
The Most Common Java Keytool Keystore Commands-CHINASSL
Importing
These commands allow you to generate a new Java Keytool keystore file, create a CSR, and import certificates.
Any root or intermediate certificates will need to be imported before importing the primary certificate for your
domain.
Home (index.html)
Generate a Java keystore and key pair
Generate CSR
(generator-csr.html)
keytool -genkey -alias mydomain -keyalg RSA -keystore keystore.jks -keysiz
Decode CSR
Generate a certificate signing request (CSR) for an existing Java keystore (decoder-csr.html)
Convert SSL
Import a root or intermediate CA certificate to an existing Java keystore (convert-ssl.html)
keytool -import -trustcacerts -alias root -file mydomain.crt -keystore key Match SSL (match-
ssl-details.html)
Decode SSL
Import a signed primary certificate to an existing Java keystore (decoder-ssl.html)
Keytool Commands
keytool -import -trustcacerts -alias mydomain -file mydomain.crt -keystore
(keytool-commands.html)
keytool -genkey -keyalg RSA -alias selfsigned -keystore keystore.jks -stor Generate CSR Guide
(https://www.chinassl.net/gen
Contact CHAT
Check which certificates are in a Java keystore
LiveZilla Live Chat Software
QQ:405105450
keytool -list -v -keystore keystore.jks
(http://wpa.qq.com/
v=3&uin=405105450
Check a particular keystore entry using an alias
QQ:188285333
v=3&uin=188285333
QQ:188285666
Other Java Keytool Commands
(http://wpa.qq.com/
(http://wpa.qq.com/
keytool -storepasswd -new new_storepass -keystore keystore.jks
v=3&uin=188263999
keytool
Java Keytool is a key and certificate management utility. It allows users to manage their own public/private key
pairs and certificates. It also allows users to cache certificates. Java Keytool stores the keys and certificates in
what is called a keystore. By default the Java keystore is implemented as a file. It protects private keys with a
password. A Keytool keystore contains the private key and any certificates necessary to complete a chain of
trust and establish the trustworthiness of the primary certificate.
Each certificate in a Java keystore is associated with a unique alias. When creating a Java keystore you will first
create the .jks file that will initially only contain the private key. You will then generate a CSR and have a
certificate generated from it. Then you will import the certificate to the keystore including any root certificates.
Java Keytool also several other functions that allow you to view the details of a certificate or list the certificates