keytool 的使用

//生成server.keystore

1.keytool -validity 36500 -genkey -v -alias server -keyalg RSA -keystore D:\rekeys\server.keystore -dname "CN=localhost,OU=icesoft,O=icesoft,L=Haidian,ST=Beijing,c=cn" -storepass M132ook -keypass M132ook




//生成client.keystore
2.keytool -validity 36500 -genkey -v -alias client -keyalg RSA -keystore D:\rekeys\client.keystore -dname "CN=client,OU=icesoft,O=icesoft,L=Haidian,ST=Beijing,c=cn" -storepass M132ook -keypass M132ook




//生成client.cer
3.keytool -export -v -alias client -keystore D:\rekeys\client.keystore -storepass M132ook -rfc -file D:\rekeys\client.cer


//生成server.cer
4.keytool -export -v -alias server -keystore D:\rekeys\server.keystore -storepass M132ook -rfc -file D:\rekeys\server.cer


//server.cer导入client.keystore 
5.keytool -import -v -alias server -file D:\rekeys\server.cer -keystore D:\rekeys\client.keystore -storepass M132ook


//client.cer导入server.keystore
6.keytool -import -v -alias client -file D:\rekeys\client.cer -keystore D:\rekeys\server.keystore -storepass M132ook










7.keytool -validity 365 -genkeypair -v -alias client12 -keyalg RSA -storetype PKCS12 -keystore D:\rekeysp12\client.p12 -dname "CN=client,OU=icesoft,O=icesoft,L=Haidian,ST=Beijing,c=cn" -storepass M132ook -keypass M132ook


8.keytool -export -v -alias client12 -keystore D:\rekeysp12\client.p12 -storetype PKCS12 -storepass M132ook -rfc -file D:\rekeysp12\client.cer


9.keytool -import -v -alias client12 -file D:\rekeysp12\client.cer -keystore D:\rekeys\server.keystore -storepass M132ook


keytool -list -keystore D:\rekeys\server.keystore -storepass M132ook
keytool -list -keystore D:\rekeys\client.keystore -storepass M132ook