Keytool Operations: Difference between revisions

From NovaOrdis Knowledge Base
Jump to navigation Jump to search
Line 8: Line 8:


=Generate a Certificate Signing Request=
=Generate a Certificate Signing Request=
{{External|https://docs.oracle.com/javase/7/docs/technotes/guides/security/crypto/HowToImplAProvider.html#Step6}}


A [[Public_Key_Security#Certificate_Signing_Request_.28CSR.29|certificate signing request]] can be generated with the following command:
A [[Public_Key_Security#Certificate_Signing_Request_.28CSR.29|certificate signing request]] can be generated with the following command:

Revision as of 05:11, 8 April 2018

Internal

Generate a Public/Private Key Pair

A key pair can be generated with the following command:

Generate a Certificate Signing Request

A certificate signing request can be generated with the following command:

keytool -certreq -alias jce-provider-signing-key -file novaordis-jce-provider2.csr -keystore ./jce-provider-signing-keystore.jks -storepass n7ejfh2jef234rBe

Inspect the Certificate

The certificate data can be displayed with:

keytool -printcert -v -file ./test-cert.pem

It accepts certificates in PEM format.