[size=medium;]jdk的keytool证书管理命令[/size]
#--------------------------------------------------------<br># 创建新证书<br>#--------------------------------------------------------<br>keytool -genkey -alias tomcat -keyalg rsa -keypass changeit -storepass changeit -keystore d:\server.keystore -dname "cn=localhost, ou=localhost, o=localhost, l=sh, st=sh, c=cn" -validity 3600 <br><br>#--------------------------------------------------------<br># 导出证书<br>#--------------------------------------------------------<br>keytool -export -trustcacerts -alias tomcat -file d:\server.cer -keystore d:\server.keystore -storepass changeit<br><br>#--------------------------------------------------------<br># 导入证书到jdk的证书库[\jre\lib\security\cacerts]中<br>#--------------------------------------------------------<br>keytool -import -trustcacerts -alias tomcat -file d:\server.cer -keystore d:\j2se\j2se_1.4.2\jre\lib\security\cacerts -storepass changeit<br>如果有提示,输入y就可以了。<br><br>#--------------------------------------------------------<br># 列出信任证书库中所有已有证书<br>#--------------------------------------------------------<br>keytool -list -keystore d:\j2se\j2se_1.4.2\jre\lib\security\cacerts -storepass changeit <br><br>#--------------------------------------------------------<br># 删除库中某个证书<br>#--------------------------------------------------------<br>keytool -delete -trustcacerts -alias tomcat -keystore d:\j2se\j2se_1.4.2\jre\lib\security\cacerts -storepass changeit <br>
#--------------------------------------------------------<br># 创建新证书<br>#--------------------------------------------------------<br>keytool -genkey -alias tomcat -keyalg rsa -keypass changeit -storepass changeit -keystore d:\server.keystore -dname "cn=localhost, ou=localhost, o=localhost, l=sh, st=sh, c=cn" -validity 3600 <br><br>#--------------------------------------------------------<br># 导出证书<br>#--------------------------------------------------------<br>keytool -export -trustcacerts -alias tomcat -file d:\server.cer -keystore d:\server.keystore -storepass changeit<br><br>#--------------------------------------------------------<br># 导入证书到jdk的证书库[\jre\lib\security\cacerts]中<br>#--------------------------------------------------------<br>keytool -import -trustcacerts -alias tomcat -file d:\server.cer -keystore d:\j2se\j2se_1.4.2\jre\lib\security\cacerts -storepass changeit<br>如果有提示,输入y就可以了。<br><br>#--------------------------------------------------------<br># 列出信任证书库中所有已有证书<br>#--------------------------------------------------------<br>keytool -list -keystore d:\j2se\j2se_1.4.2\jre\lib\security\cacerts -storepass changeit <br><br>#--------------------------------------------------------<br># 删除库中某个证书<br>#--------------------------------------------------------<br>keytool -delete -trustcacerts -alias tomcat -keystore d:\j2se\j2se_1.4.2\jre\lib\security\cacerts -storepass changeit <br>
本文介绍使用 JDK 的 keytool 工具进行证书管理的方法,包括创建新证书、导出与导入证书到 JDK 证书库、列出及删除证书等操作步骤。
1154

被折叠的 条评论
为什么被折叠?



