Java Keystore and Certificates

published by ericdes on Wed, 01/26/2011 - 11:36
  • Notice: Fedora uses /etc/pki/tls instead of /etc/ssl for the certificates.

Java offers a tool to generate certificates: keytool. Sometimes it’s necessary to store some certificates in a keystore (especially for uses by Java applications), and this tool is the way to go. These notes are not detailed as I wished, and I’ll complete them the next time I need to use this tool.

Java keystore: our.keystore

Generate a private key

cd /etc/ssl/private
keytool -genkey -keyalg rsa -keystore our.keystore -alias $CERT

Generate a certificate request

keytool -certreq -alias $CERT -keystore our.keystore -file ../certs/$CERT.req

Notice: If not already done, import the CA certificate into the keystore:

keytool -import -alias certsign -file ../certs/certsign.crt -keystore our.keystore
Answer "yes" to trust this certificate

CertSign signs / issues the certificate

Send the .req file to /etc/ssl/certs and generate the .crt file:

openssl x509 -req -days 9125 -sha1 \
 -extfile /etc/ssl/openssl.cnf -extensions v3_req \
 -CA /etc/ssl/certs/certsign.crt -CAkey /etc/ssl/private/certsign.key \
 -CAserial /etc/ssl/certsign.srl -CAcreateserial \
 -in /etc/ssl/certs/$CERT.req -out /etc/ssl/certs/$CERT.crt

Send the .crt file back and add it to keystore:

keytool -import -alias $CERT -file ../certs/$CERT.crt -keystore our.keystore

Read further: http://www.startux.de/index.php/component/content/article/25-java/44-dealing-with-java-keystores

Tags:

Add new comment

More information about text formats

Wiki Textile Syntax

  • You can enable syntax highlighting of source code with the following tags: [code], [blockcode], [asp], [linux], [c], [cpp], [c#], [delphi], [dos], [f#], [html], [ini], [java], [javascript], [mysql], [perl], [php], [postgresql], [python], [ruby], [sql], [text], [vb], [xml].
  • You can use Textile markup to format text.
  • Web page addresses and e-mail addresses turn into links automatically.

Filtered HTML

  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <blockquote> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.