使用keytool生成SSL证书

使用keytool生成SSL证书

新建keystore文件

keytool -genkeypair -keyalg RSA  -keystore testKeyStore.jks -dname "CN=denglintao.com, OU=ZooKeeper, O=Apache, L=Unknown, ST=Unknown, C=Unknown”

将私钥生成证书

keytool -export -keystore testKeyStore.jks -rfc -file cert.cer

将证书文件导入testTrustStore

 keytool -import -file cert.cer  -keystore testTrustStore.jks

查看证书

keytool -list -v -keystore testTrustStore.jks

将 jsk转为 p12 在转pem

 keytool -importkeystore -srckeystore testKeyStore.jks -destkeystore testKeyStore.p12 -srcstoretype jks -deststoretype pkcs12
openssl pkcs12 -nodes -in testKeyStore.p12 -out testKeyStore.pem
openssl x509 -in testKeyStore.pem -pubkey -noout

keytool -importkeystore -srckeystore testTrustStore.jks -destkeystore testTrustStore.p12 -srcstoretype jks -deststoretype pkcs12
openssl pkcs12 -nodes -in testTrustStore.p12 -out testTrustStore.pem
openssl x509 -in testTrustStore.pem -pubkey -noout