By default, the keytool utility creates a keystore file in the directory where the utility is run.
To run the keytool utility, your shell environment must be configured so that the J2SE /bin directory is in the path, otherwise the full path to the utility must be present on the command line.
Change to the directory that contains the keystore and truststore files.
Always generate the certificate in the directory containing the keystore and truststore files. The default is domain-dir/config.
Generate the certificate in the keystore file, keystore.jks, using the following command format:
keytool -genkey -alias keyAlias-keyalg RSA -keypass changeit -storepass changeit keystore keystore.jks |
Use any unique name as your keyAlias. If you have changed the keystore or private key password from the default (changeit), substitute the new password for changeit. The default key password alias is s1as.
A prompt appears that asks for your name, organization, and other information.
Export the generated certificate to the server.cer file (or client.cer if you prefer), using the following command format:
keytool -export -alias keyAlias-storepass changeit -file server.cer -keystore keystore.jks |
If a certificate signed by a certificate authority is required, see To Sign a Certificate by Using keytool.
Create the cacerts.jks truststore file and add the certificate to the truststore, using the following command format:
keytool -import -v -trustcacerts -alias keyAlias -file server.cer -keystore cacerts.jks -keypass changeit |
If you have changed the keystore or private key password from the default (changeit), substitute the new password.
Information about the certificate is displayed and a prompt appears asking if you want to trust the certificate.
Type yes, then press Enter.
Information similar to the following is displayed:
Certificate was added to keystore [Saving cacerts.jks] |
To apply your changes, restart Enterprise Server. See To Restart a Domain.
RSA is public-key encryption technology developed by RSA Data Security, Inc.
keytool -genkey -noprompt -trustcacerts -keyalg RSA -alias ${cert.alias} -dname ${dn.name} -keypass ${key.pass} -keystore ${keystore.file} -storepass ${keystore.pass} |
keytool -genkey -noprompt -trustcacerts -alias ${cert.alias} -dname ${dn.name} -keypass ${key.pass} -keystore ${keystore.file} -storepass ${keystore.pass} |
keytool -list -v -keystore ${keystore.file} -storepass ${keystore.pass} |
keytool -list -v -alias ${cert.alias} -keystore ${keystore.file} -storepass ${keystore.pass} |
For more information about keytool, see the keytool documentation at http://java.sun.com/j2se/1.5.0/docs/tooldocs/solaris/keytool.html.