检查KeyStore

检查一个keystore: 
keytool -list -v -keystore keystore 
Enter keystore password:your password(输入密码) 
将显示keystore内容如: 
Keystore type: jks 
Keystore provider: SUN 

Your keystore contains 1 entry 

Alias name: yourname 
Creation date: Dec 20, 2001 
Entry type: keyEntry 
Certificate chain length: 1 
Certificate[1]: 
Owner: CN=yourname, OU=your organization, O="your organization name", 
L=your city name, ST=your province name, C=CN 
Issuer: CN=Duke, OU=Java Software, O="Sun Microsystems, Inc.", L=Palo Alto, ST=CA, C=US 
Serial number: 3c22adc1 
Valid from: Thu Dec 20 19:34:25 PST 2001 until: Thu Dec 27 19:34:25 PST 2001 
Certificate fingerprints: 
MD5: F1:5B:9B:A1:F7:16:CF:25:CF:F4:FF:35:3F:4C:9C:F0 
SHA1: B2:00:50:DD:B6:CC:35:66:21:45:0F:96:AA:AF:6A:3D:E4:03:7C:74 
3.输出keystore到一个文件:testkey: 
keytool -export -alias duke -keystore keystore -rfc -file testkey 
系统输出: 
Enter keystore password:your password(输入密码) 
Certificate stored in file 
4.输入证书到一个新的truststore: 
keytool -import -alias dukecert -file testkey -keystore truststore 
Enter keystore password:your new password.(输入truststore新密码) 

5.检查truststore: 
keytool -list -v -keystore truststore 
系统将显示truststore的信息. 
现在可以用适当的keystore运行你的应用程序.如: 
java -Djavax.net.ssl.keyStore=keystore -Djavax.net.ssl.keyStorePassword=password Server 
和: java -Djavax.net.ssl.trustStore=truststore 
-Djavax.net.ssl.trustStorePassword=trustword Client