linux使用jdk和opennssl制作证书.jks

是可以在win下生成的，但是我不想安装工具，就在centos7.4下操作了

只接上命令

keytool -genkeypair -alias cxs-jwt -validity 3650 -keyalg RSA -dname "CN=jwt,OU=jtw,O=jwt,L=zurich,S=zurich,C=CH" -keypass cxs123 -keystore cxs-jwt.jks -storepass cxs123

注：cxs-jwt为别名，cxs-jwt.jks要存的文件，keypass 后的cxs123为密码 一个是私钥密码，一个是公钥密码。

keytool -list -rfc --keystore cxs-jwt.jks | openssl x509 -inform pem -pubkey

上面命令回车后要输入公钥密码
然后找到公钥（就是public key那一段）复制出来保存成txt或别的格式就可以用了。
-----BEGIN PUBLIC KEY-----
MIIBIjAN…AQAB
-----END PUBLIC KEY-----
完整的操作如下
[root@hecs-25411 java]# keytool -genkeypair -alias cxs-jwt -validity 3650 -keyalg RSA -dname “CN=jwt,OU=jtw,O=jwt,L=zurich,S=zurich,C=CH” -keypass cxs123 -keystore cxs-jwt.jks -storepass cxs123

Warning:
The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using “keytool -importkeystore -srckeystore cxs-jwt.jks -destkeystore cxs-jwt.jks -deststoretype pkcs12”.

[root@hecs-25411 java]# keytool -list -rfc --keystore cxs-jwt.jks | openssl x509 -inform pem -pubkey
Enter keystore password: cxs123
-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYOYC97zAYi8Y5+3hHyr
vMNWLb6nJuf+KIVczsriWXIHs+s8Gey9a6jGjWp7q+ynqa+xiIceYaaLmrgcJwXw
jOh69OhWvhTIpmEEsoFASSoM3OHVTdafn3any07cwnf4UBoOXkDTKur1CchSb9/j
R60Qw2cysKuR37BV6vBvOQlk2vavl4U4dyOUipUZNLIqgvXVxKV37ofjI7C1sma1
WCGfixcVk8E3rG7ttOTnLNRxF9Ej75ao5dHQhiMDD3jyrSeM5E5YLv1wQKGlapAc
kc90NCAnHr4va2QAlrqdO8QplO1rBR90ZfsVDxkV5C9G37mSLJwcvZI/0aacZi5Y
vwIDAQAB
-----END PUBLIC KEY-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Warning:
The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using “keytool -importkeystore -srckeystore cxs-jwt.jks -destkeystore cxs-jwt.jks -deststoretype pkcs12”.
[root@hecs-25411 java]#

前提是要配置好jdk，要不然会报错。
jdk配置：

vim /etc/profile

添加下面的内容
直接把jdk包解压后就可以了jdk-8u191-linux-x64.tar.gz

export JAVA_HOME=/usr/local/java/jdk1.8.0_191
export JRE_HOME=${JAVA_HOME}/jre
export CLASSPATH=$CLASSPATH:.:${JAVA_HOME}/lib:${JAVA_HOME}/jre/lib
export PATH=${JAVA_HOME}/bin:${JAVA_HOME}/jre/bin:$PATH

JAVA_HOME这个是jdk的路径
保存后重新加载这个文件命令是

source /etc/profile

查看一下是否安装好了

java -version

[root@hecs-25411 java]# java -version
java version "1.8.0_191"
Java(TM) SE Runtime Environment (build 1.8.0_191-b12)
Java HotSpot(TM) 64-Bit Server VM (build 25.191-b12, mixed mode)