Generate Keystore using Keytool commands
Keytool Commands to generate Keystore(Certificate): Keystore contains both Private and Public key. Basically private key is used for encryption.
keytool -genkeypair -alias my_certificate -keystore "C:\my_keystore.pfx" -storepass my_password -validity 365 -keyalg RSA -keysize 2048 -storetype pkcs12
Command to generate certificate(.csr): .csr file conatins public key which is used for decryption.
keytool -certreq -alias my_certificate -file "C:\my_certificate.csr" -keystore "C:\my_keystore.pfx" -validity 365 -keyalg RSA -keysize 2048 -storetype pkcs12
-----------------------------------------------------------------------------------------------
Exports certificate in .csr file:
keytool -exportcert -rfc -alias my_certificate -keystore "C:\my_keystore.pfx" -validity 365 -keyalg RSA -keysize 2048 -storetype pkcs12 -file "C:\my_certificate.csr"
Certificate stored in file <C:\my_certificate.csr>
--------------------------------------------------------------------------------------------------- Print Certificate data:
keytool -printcert -file "C:\my_certificate.csr"
------------------------------------------------------------------------------------------------------
Imports .csr file to cacerts: cacerts file is under Java\jre\lib\security directory.Below command will import .csr file to cacerts. .csr file can be loaded from cacerts using PdfPKCS7.loadCacertsKeyStore()(This will return all the imported certificates)
keytool -import -trustcacerts -file "C:\my_certificate.csr" -alias my_certificate -keystore cacerts
-----------------------------------------------------------------------------------------------------
keytool -genkeypair -alias my_certificate -keystore "C:\my_keystore.pfx" -storepass my_password -validity 365 -keyalg RSA -keysize 2048 -storetype pkcs12
Command to generate certificate(.csr): .csr file conatins public key which is used for decryption.
keytool -certreq -alias my_certificate -file "C:\my_certificate.csr" -keystore "C:\my_keystore.pfx" -validity 365 -keyalg RSA -keysize 2048 -storetype pkcs12
-----------------------------------------------------------------------------------------------
Exports certificate in .csr file:
keytool -exportcert -rfc -alias my_certificate -keystore "C:\my_keystore.pfx" -validity 365 -keyalg RSA -keysize 2048 -storetype pkcs12 -file "C:\my_certificate.csr"
Certificate stored in file <C:\my_certificate.csr>
--------------------------------------------------------------------------------------------------- Print Certificate data:
keytool -printcert -file "C:\my_certificate.csr"
------------------------------------------------------------------------------------------------------
Imports .csr file to cacerts: cacerts file is under Java\jre\lib\security directory.Below command will import .csr file to cacerts. .csr file can be loaded from cacerts using PdfPKCS7.loadCacertsKeyStore()(This will return all the imported certificates)
keytool -import -trustcacerts -file "C:\my_certificate.csr" -alias my_certificate -keystore cacerts
-----------------------------------------------------------------------------------------------------
Comments
Post a Comment