1.4.1.1 Generating a Self-Signed Server Keystore

You can create a server key store using the keytool command.

The following steps show how to create a server keystore with a self-signed certificate:

1. Go to the following directory:

   cd /etc/oracle/graph

2. Run the following command:

   keytool -genkey -alias pgx -keyalg RSA -keystore server_keystore.jks

3. Provide the requested details. For example:

   Enter keystore password:
   Re-enter new password:
   What is your first and last name?
     [Unknown]:  localhost
   What is the name of your organizational unit?
     [Unknown]:  OU
   What is the name of your organization?
     [Unknown]:  MyOrganization
   What is the name of your City or Locality?
     [Unknown]:  MyTown
   What is the name of your State or Province?
     [Unknown]:  MyState
   What is the two-letter country code for this unit?
     [Unknown]:  US
   Is CN=localhost, OU=OU, O=MyOrganization, L=MyTown, ST=MyState, C=US correct?
     [no]:  yes

   The server_keystore.jks is created successfully in cd /etc/oracle/graph.