Java keytool生成jks证书，并使用openssl查看公钥信息

1.keytoo工具生成jks证书

keytool在jdk/bin目录下

在idea terminal使用 keytool生成jks：

idea——terminal

跳到指定要生成jks目录：

/home/echo/IdeaProjects/spring-security-oauth2-demo/spring-security-oauth2-authorization-jwt/src/main/resources

生成jks指令：

keytool -genkeypair -alias oauth2 -keyalg RSA -keystore oauth2.jks -keysize 2048 

#oauth2 为自定义，oauth2.jks为证书名称，可指定路径，不指定当前目录下

下面就是生成公钥：

keytool -list -rfc --keystore oauth2.jks | openssl x509 -inform pem -pubkey

'openssl' 不是内部或外部命令，也不是可运行的程序
或批处理文件

2.下载openssl，并安装配置

下载地址：openssl

随便下载一个好了，反正都是exe的，至于收费那是不可能的（土豪随意）。

安装完成之后配置一下环境变量。把openssl安装路径bin的路径（例如 D:\OpenSSL-Win64\bin）加入到操作系统的系统环境变量Path中。

重启电脑！！！

用管理员身份运行DOS就可以进行openssl的操作了。

解决openssl错误

WARNING: can't open config file: /usr/local/ssl/openssl.cnf

在你得opensll安装路径下找到openssl.cfg，我的路径是 D:\OpenSSL-Win64\bin\openssl.cfg,设置环境变量

set OPENSSL_CONF=D:\OpenSSL-Win64\bin\openssl.cfg

下面就是生成公钥：

D:\...\resources>keytool -list -rfc --keystore oauth2.jks | openssl x509 -inform pem -pubkey
'openssl' 不是内部或外部命令，也不是可运行的程序
或批处理文件。

D:\...\resources>keytool -list -rfc --keystore oauth2.jks | D:\OpenSSL-Win64\bin\openssl x509 -inform pem -pubkey
WARNING: can't open config file: /usr/local/ssl/openssl.cnf
unable to load certificate
10728:error:0906D06C:PEM routines:PEM_read_bio:no start line:.\crypto\pem\pem_lib.c:697:Expecting: TRUSTED CERTIFICATE

D:\...\resources>set OPENSSL_CONF=D:\OpenSSL-Win64\bin\openssl.cfg

D:\...\resources>keytool -list -rfc --keystore oauth2.jks | D:\OpenSSL-Win64\bin\openssl x509 -inform pem -pubkey
输入密钥库口令:  123456
-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjUbbP9Rk5iaouSUonEr
agFbAGPpyr6YjNT1jbkW/FHu6deZpPyzBD4R5fKVftw1y9V7L0vOrOMtdYJAJf7Q
UkJgdei4FSQPlKOKNepHJZtMoKeqfpXDEJGI5EgnCtOQUvn29nGPusBDGXkctIKb
5p66UYqGkWHNUBxBjFRw6pRzOQHiJEebwmFl5xIXG90YyqYV6PRsSCkqT4yH4BOV
QFyzfl6razwAfD2KeLjd+zcNQjWJxNwr5kpJQjL3yuNgJxHyWHAzgIcfZM+MCo7U
m6BgxhlqLy65WccDbHKaexWHsmlBRHOU84I+6P62WSa6Uu99Oki8Zuh75o9E2iMX
XwIDAQAB
-----END PUBLIC KEY-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----