keytool 生成证书过程-浏览器导入证书:
keytool -genkey -alias test -keypass 123456 -keyalg RSA -keysize 1024 -validity 1095 -keystore D:/tomcat.keystore -storepass 123456
keytool -genkey -alias client -keypass 123456 -keyalg RSA -storetype PKCS12 -keypass 123456 -storepass 123456 -keystore D:/client.p12
keytool -export -alias client -keystore D:/client.p12 -storetype PKCS12 -keypass 123456 -file D:/client.cer
keytool -import -v -file D:/client.cer -keystore D:/tomcat.keystore
keytool -keystore D:/tomcat.keystore -export -alias test -file D:/server.cer
浏览器导入证书 client.p12
参考: