利用JDK的keytool工具生成证书的DOS命令

[b]1、生成服务器端证书：[/b]
E:\jdk1.6\bin>[color=blue]keytool -genkey -v -alias tomcat -keyalg RSA -keystore D:/SSL/serv
er/tomcat.keystore -dname "CN=127.0.0.1,OU=pde,O=pde,L=Peking,ST=Peking,C=CN" -v
alidity 3650 -storepass pdepde -keypass pdepde[/color]

[b]2、导出服务端证书：[/b]
E:\jdk1.6\bin>[color=blue]keytool -export -alias tomcat -keystore d:/ssl/server/tomcat.keyst
ore -storepass pdepde -rfc -file d:/ssl/server/tomcat.cer[/color]

[b]3、生成客户端证书：[/b]
E:\jdk1.6\bin>[color=blue]keytool -genkey -v -alias client -keyalg RSA -storetype PKCS12 -ke
ystore D:/SSL/client/client.p12 -dname "CN=client,OU=pde,O=pde,L=bj,ST=bj,C=CN"
-validity 3650 -storepass client -keypass client[/color]

[b]4、导出客户端证书：[/b]
E:\jdk1.6\bin>[color=blue]keytool -export -alias client -keystore d:/ssl/client/client.p12 -
storetype PKCS12 -storepass client -rfc -file d:/ssl/client/client.cer[/color]

[b]5、把客户端证书加入服务端证书信任列表：[/b]
E:\jdk1.6\bin>[color=blue]keytool -import -alias client -v -file d:/ssl/client/client.cer -k
eystore d:/ssl/server/tomcat.keystore -storepass pdepde[/color]

[b]6、生成客户端信任列表：[/b]
E:\jdk1.6\bin>[color=blue]keytool -import -file d:/ssl/server/tomcat.cer -storepass pdepde -
keystore d:/ssl/client/client.truststore -alias tomcat -noprompt[/color]


[color=green][b][说明：证书生成目录D:/SSL/server/存放服务器端证书，D:/SSL/client/存放客户端证书][/b][/color]