JDK的keytool证书管理命令

 

#--------------------------------------------------------
 # 创建新证书
 #--------------------------------------------------------
 keytool -genkey -alias tomcat -keyalg RSA -keypass changeit -storepass changeit -keystore d:\server.keystore -dname "CN=localhost, OU=localhost, O=localhost, L=SH, ST=SH, C=CN" -validity 3600 

 #--------------------------------------------------------
 # 导出证书
 #--------------------------------------------------------
 keytool -export -trustcacerts -alias tomcat -file d:\server.cer -keystore  d:\server.keystore -storepass changeit

 #--------------------------------------------------------
 # 导入证书到jdk的证书库[\jre\lib\security\cacerts]中
 #--------------------------------------------------------
 keytool -import -trustcacerts -alias tomcat -file d:\server.cer -keystore  D:\j2se\j2se_1.4.2\jre\lib\security\cacerts -storepass changeit
 如果有提示,输入Y就可以了。

 #--------------------------------------------------------
 # 列出信任证书库中所有已有证书
 #--------------------------------------------------------
 keytool -list -keystore D:\j2se\j2se_1.4.2\jre\lib\security\cacerts -storepass changeit 

 #--------------------------------------------------------
 # 删除库中某个证书
 #--------------------------------------------------------
 keytool -delete -trustcacerts -alias tomcat  -keystore  D:\j2se\j2se_1.4.2\jre\lib\security\cacerts -storepass changeit