這里使用的是jdk的keytool

http://docs.oracle.com/javase/8/docs/technotes/tools/unix/keytool.html#CHDBGFHE

以下所有操作都是在jdk安裝目錄操作。

一鍵生成證書：

keytool -genkey -alias tomcat -keypass 123456 -keyalg RSA -genkeypair -dname "cn=cas.demo.com,ou=cas.demo.com,o=cas.demo.com,l=sz,st=sz,c=sz" -keystore caskeystore -storepass 123456 -validity 3650

導(dǎo)出證書

keytool -export -alias tomcat -keystore caskeystore -file caskeystore.crt
輸入密鑰庫(kù)口令: 123456
存儲(chǔ)在文件 <caskeystore.crt> 中的證書

將證書導(dǎo)入jdk

keytool -import -alias tomcat -keystore jre/lib/security/cacerts -file caskeystore.crt

輸入密鑰庫(kù)口令:  changeit
所有者: CN=cas.demo.com, OU=cas.demo.com, O=cas.demo.com, L=sz, ST=sz, C=sz
發(fā)布者: CN=cas.demo.com, OU=cas.demo.com, O=cas.demo.com, L=sz, ST=sz, C=sz
序列號(hào): 1814a759
有效期開始日期: Thu Sep 22 15:08:12 CST 2016, 截止日期: Sun Sep 20 15:08:12 CST 2026
證書指紋:
         MD5: B8:A3:6D:18:3B:5A:5D:20:DF:E5:1F:9D:F6:0E:65:99
         SHA1: 59:A0:FD:2A:85:41:0A:24:A5:A9:AA:62:85:07:66:86:A3:19:CC:5B
         SHA256: 80:50:4C:91:19:44:29:42:3A:1D:E2:C4:7E:DD:1A:EA:C0:7B:41:D6:C1:B1:8F:89:B0:9E:CD:10:75:F7:DE:F4
         簽名算法名稱: SHA256withRSA
         版本: 3

擴(kuò)展:

#1: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 93 77 61 4A D9 4F 06 BB   50 1E 1D 62 0A B4 71 27  .waJ.O..P..b..q'
0010: 3A CA 54 50                                        :.TP
]
]

是否信任此證書? [否]:  Y
證書已添加到密鑰庫(kù)中

查看證書列表

keytool -list -keystore jre/lib/security/cacerts
輸入密鑰庫(kù)口令: changeit

查看指定證書

keytool -list -keystore jre/lib/security/cacerts -alias tomcat -v
輸入密鑰庫(kù)口令:  changeit
別名: tomcat
創(chuàng)建日期: 2016-9-22
條目類型: trustedCertEntry

所有者: CN=cas.demo.com, OU=cas.demo.com, O=cas.demo.com, L=sz, ST=sz, C=sz
發(fā)布者: CN=cas.demo.com, OU=cas.demo.com, O=cas.demo.com, L=sz, ST=sz, C=sz
序列號(hào): 1814a759
有效期開始日期: Thu Sep 22 15:08:12 CST 2016, 截止日期: Sun Sep 20 15:08:12 CST 2026
證書指紋:
         MD5: B8:A3:6D:18:3B:5A:5D:20:DF:E5:1F:9D:F6:0E:65:99
         SHA1: 59:A0:FD:2A:85:41:0A:24:A5:A9:AA:62:85:07:66:86:A3:19:CC:5B
         SHA256: 80:50:4C:91:19:44:29:42:3A:1D:E2:C4:7E:DD:1A:EA:C0:7B:41:D6:C1:B1:8F:89:B0:9E:CD:10:75:F7:DE:F4
         簽名算法名稱: SHA256withRSA
         版本: 3

擴(kuò)展:

#1: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 93 77 61 4A D9 4F 06 BB   50 1E 1D 62 0A B4 71 27  .waJ.O..P..b..q'
0010: 3A CA 54 50                                        :.TP
]
]

刪除指定證書

keytool -delete -keystore jre/lib/security/cacerts -alias tomcat 輸入密鑰庫(kù)口令: changeit