Generate Keystore using Keytool commands

Keytool Commands to generate Keystore(Certificate): Keystore contains both Private and Public key. Basically private key is used for encryption.

keytool -genkeypair -alias my_certificate -keystore "C:\my_keystore.pfx" -storepass my_password -validity 365 -keyalg RSA -keysize 2048 -storetype pkcs12

Command to generate certificate(.csr): .csr file conatins public key which is used for decryption.
keytool -certreq -alias my_certificate -file "C:\my_certificate.csr" -keystore "C:\my_keystore.pfx" -validity 365 -keyalg RSA -keysize 2048 -storetype pkcs12
-----------------------------------------------------------------------------------------------
Exports certificate in .csr file:
keytool -exportcert -rfc -alias my_certificate -keystore "C:\my_keystore.pfx" -validity 365 -keyalg RSA -keysize 2048 -storetype pkcs12 -file "C:\my_certificate.csr"

Certificate stored in file <C:\my_certificate.csr>
--------------------------------------------------------------------------------------------------- Print Certificate data:
keytool -printcert -file "C:\my_certificate.csr"

------------------------------------------------------------------------------------------------------
Imports .csr file to cacerts: cacerts file is under Java\jre\lib\security directory.Below command will import .csr file to cacerts. .csr file can be loaded from cacerts using PdfPKCS7.loadCacertsKeyStore()(This will return all the imported certificates)
keytool -import -trustcacerts -file "C:\my_certificate.csr" -alias my_certificate -keystore cacerts
-----------------------------------------------------------------------------------------------------

Comments

Popular posts from this blog

Edit/Modify existing PDF using Java(iText)

Verify Digital Signature in PDF using Java(iText) and cacerts

Steps to create SOAP Web service using Eclipse