這里使用的是jdk的keytool
http://docs.oracle.com/javase/8/docs/technotes/tools/unix/keytool.html#CHDBGFHE
以下所有操作都是在jdk安裝目錄操作。
一鍵生成證書：
keytool -genkey -alias tomcat -keypass 123456 -keyalg RSA -genkeypair -dname "cn=cas.demo.com,ou=cas.demo.com,o=cas.demo.com,l=sz,st=sz,c=sz" -keystore caskeystore -storepass 123456 -validity 3650
導出證書
keytool -export -alias tomcat -keystore caskeystore -file caskeystore.crt
輸入密鑰庫口令: 123456
存儲在文件 <caskeystore.crt> 中的證書
將證書導入jdk
keytool -import -alias tomcat -keystore jre/lib/security/cacerts -file caskeystore.crt
輸入密鑰庫口令: changeit
所有者: CN=cas.demo.com, OU=cas.demo.com, O=cas.demo.com, L=sz, ST=sz, C=sz
發布者: CN=cas.demo.com, OU=cas.demo.com, O=cas.demo.com, L=sz, ST=sz, C=sz
序列號: 1814a759
有效期開始日期: Thu Sep 22 15:08:12 CST 2016, 截止日期: Sun Sep 20 15:08:12 CST 2026
證書指紋:
MD5: B8:A3:6D:18:3B:5A:5D:20:DF:E5:1F:9D:F6:0E:65:99
SHA1: 59:A0:FD:2A:85:41:0A:24:A5:A9:AA:62:85:07:66:86:A3:19:CC:5B
SHA256: 80:50:4C:91:19:44:29:42:3A:1D:E2:C4:7E:DD:1A:EA:C0:7B:41:D6:C1:B1:8F:89:B0:9E:CD:10:75:F7:DE:F4
簽名算法名稱: SHA256withRSA
版本: 3
擴展:
#1: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 93 77 61 4A D9 4F 06 BB 50 1E 1D 62 0A B4 71 27 .waJ.O..P..b..q'
0010: 3A CA 54 50 :.TP
]
]
是否信任此證書? [否]: Y
證書已添加到密鑰庫中
查看證書列表
keytool -list -keystore jre/lib/security/cacerts
輸入密鑰庫口令: changeit
查看指定證書
keytool -list -keystore jre/lib/security/cacerts -alias tomcat -v
輸入密鑰庫口令: changeit
別名: tomcat
創建日期: 2016-9-22
條目類型: trustedCertEntry
所有者: CN=cas.demo.com, OU=cas.demo.com, O=cas.demo.com, L=sz, ST=sz, C=sz
發布者: CN=cas.demo.com, OU=cas.demo.com, O=cas.demo.com, L=sz, ST=sz, C=sz
序列號: 1814a759
有效期開始日期: Thu Sep 22 15:08:12 CST 2016, 截止日期: Sun Sep 20 15:08:12 CST 2026
證書指紋:
MD5: B8:A3:6D:18:3B:5A:5D:20:DF:E5:1F:9D:F6:0E:65:99
SHA1: 59:A0:FD:2A:85:41:0A:24:A5:A9:AA:62:85:07:66:86:A3:19:CC:5B
SHA256: 80:50:4C:91:19:44:29:42:3A:1D:E2:C4:7E:DD:1A:EA:C0:7B:41:D6:C1:B1:8F:89:B0:9E:CD:10:75:F7:DE:F4
簽名算法名稱: SHA256withRSA
版本: 3
擴展:
#1: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 93 77 61 4A D9 4F 06 BB 50 1E 1D 62 0A B4 71 27 .waJ.O..P..b..q'
0010: 3A CA 54 50 :.TP
]
]
刪除指定證書
keytool -delete -keystore jre/lib/security/cacerts -alias tomcat 輸入密鑰庫口令: changeit
