In this short tutorial, we’re going to introduce the keytool<\/a><\/em> command. We’ll learn how to use keytool<\/em> to create a new certificate and check the information for that certificate.<\/p>\n Java includes the keytool<\/em> utility in its releases. We use it to manage<\/strong>\u00a0keys and certificates<\/strong> and store them in a keystore. The keytool<\/em> command allows us to create self-signed certificates and show information about the keystore.<\/p>\n In the following sections, we’re going to go through different functionalities of this utility.<\/p>\n First of all, let’s create a self-signed certificate that could be used to establish secure communication between projects in our development environment, for example.<\/p>\n In order to generate the certificate<\/strong>, we’re going to open a command-line prompt and use keytool<\/em> command with the -genkeypair<\/em> option:<\/p>\n Let’s learn more about each of these parameters:<\/p>\n For example, let’s generate a certificate named “cert1”<\/em> that has a private key of “pass123”<\/em> and is valid for one year. We’ll also specify “stpass123”<\/em> as the keystore password:<\/p>\n After executing the command, it’ll ask for some information that we’ll need to provide:<\/p>\n As mentioned, if we haven’t created the keystore before, creating this certificate will create it automatically.<\/p>\n We could also execute the -genkeypair<\/em> option without parameters. If we don’t provide them in the command line and they’re mandatory, we’ll be prompted for them.<\/p>\n Note that it’s generally advised not to provide the passwords (-keypass<\/em> or -storepass<\/em>) on the command line in production environments<\/strong>.<\/p>\n Next, we’re going to learn how to view the certificates<\/strong> that are stored in our keystore. For this purpose, we’ll use the -list<\/em> option:<\/p>\n The output for the executed command will show the certificate that we’ve created:<\/p>\n If we want to get the information for a concrete certificate<\/strong>, we just need to include the\u00a0-alias<\/em> option to our command. To get further information than provided by default, we’ll also add the -v<\/em> (verbose) option:<\/p>\n This will provide us all the information related to the requested certificate:<\/p>\n Apart from the functionalities that we’ve already seen, there are many additional features<\/a> available in this tool.<\/p>\n For example, we can delete the certificate<\/strong> we created from the keystore:<\/p>\n Another example is that we will even be able to change the alias of a certificate<\/strong>:<\/p>\n Finally, to get more information about the tool, we can ask for help<\/strong> through the command line:<\/p>\n In this quick tutorial, we’ve learned a bit about the keytool<\/em> utility. We’ve also learned to use some basic features included in this tool.<\/p>\n Learn how to generate certificates with keytool.<\/p>\n2. What Is keytool<\/em>?<\/strong><\/h2>\n
3. Creating a Self-Signed Certificate<\/strong><\/h2>\n
keytool -genkeypair -alias <alias> -keypass <keypass> -validity <validity> -storepass <storepass><\/code><\/pre>\n\n
keytool -genkeypair -alias cert1 -keypass pass123 -validity 365 -storepass stpass123<\/code><\/pre>\nWhat is your first and last name?\r\n [Unknown]: Name\r\nWhat is the name of your organizational unit?\r\n [Unknown]: Unit\r\nWhat is the name of your organization?\r\n [Unknown]: Company\r\nWhat is the name of your City or Locality?\r\n [Unknown]: City\r\nWhat is the name of your State or Province?\r\n [Unknown]: State\r\nWhat is the two-letter country code for this unit?\r\n [Unknown]: US\r\nIs CN=Name, OU=Unit, O=Company, L=City, ST=State, C=US correct?\r\n [no]: yes<\/code><\/pre>\n4. Listing Certificates in the Keystore<\/strong><\/h2>\n
keytool -list -storepass <storepass> <\/code><\/pre>\nKeystore type: JKS\r\nKeystore provider: SUN\r\nYour keystore contains 1 entry\r\ncert1, 02-ago-2020, PrivateKeyEntry, \r\nCertificate fingerprint (SHA1): 0B:3F:98:2E:A4:F7:33:6E:C4:2E:29:72:A7:17:E0:F5:22:45:08:2F<\/code><\/pre>\nkeytool -list -v -alias <alias> -storepass <storepass> <\/code><\/pre>\nAlias name: cert1\r\nCreation date: 02-ago-2020\r\nEntry type: PrivateKeyEntry\r\nCertificate chain length: 1\r\nCertificate[1]:\r\nOwner: CN=Name, OU=Unit, O=Company, L=City, ST=State, C=US\r\nIssuer: CN=Name, OU=Unit, O=Company, L=City, ST=State, C=US\r\nSerial number: 11d34890\r\nValid from: Sun Aug 02 20:25:14 CEST 2020 until: Mon Aug 02 20:25:14 CEST 2021\r\nCertificate fingerprints:\r\n\t MD5: 16:F8:9B:DF:2C:2F:31:F0:85:9C:70:C3:56:66:59:46\r\n\t SHA1: 0B:3F:98:2E:A4:F7:33:6E:C4:2E:29:72:A7:17:E0:F5:22:45:08:2F\r\n\t SHA256: 8C:B0:39:9F:A4:43:E2:D1:57:4A:6A:97:E9:B1:51:38:82:0F:07:F6:9E:CE:A9:AB:2E:92:52:7A:7E:98:2D:CA\r\nSignature algorithm name: SHA256withDSA\r\nSubject Public Key Algorithm: 2048-bit DSA key\r\nVersion: 3\r\nExtensions: \r\n#1: ObjectId: 2.5.29.14 Criticality=false\r\nSubjectKeyIdentifier [\r\nKeyIdentifier [\r\n0000: A1 3E DD 9A FB C0 9F 5D B5 BE 2E EC E2 87 CD 45 .>.....].......E\r\n0010: FE 0B D7 55 ...U\r\n]\r\n]<\/code><\/pre>\n5. Other Features<\/strong><\/h2>\n
keytool -delete -alias <alias> -storepass <storepass><\/code><\/pre>\nkeytool -changealias -alias <alias> -destalias <new_alias> -keypass <keypass> -storepass <storepass><\/code><\/pre>\nkeytool -help<\/code><\/pre>\n6. Conclusion<\/strong><\/h2>\n
<\/p>\n
![](\"https:\/\/assets.feedblitz.com\/i\/fblike20.png\")
<\/a> ![](\"https:\/\/assets.feedblitz.com\/i\/googleplus20.png\")
<\/a> ![](\"https:\/\/assets.feedblitz.com\/i\/pinterest20.png\")
<\/a> ![](\"https:\/\/assets.feedblitz.com\/i\/twitter20.png\")
<\/a> ![](\"https:\/\/assets.feedblitz.com\/i\/email20.png\")
<\/a> ![](\"https:\/\/assets.feedblitz.com\/i\/rss20.png\")
<\/a> ![](\"https:\/\/assets.feedblitz.com\/i\/comments20.png\")
<\/a> ![](\"https:\/\/assets.feedblitz.com\/i\/commentsrss20.png\")
<\/a> <\/div>\n\n![\\\"IT\u96fb\u8166\u88dc\u7fd2](\\\"http:\/\/itteacheritfreelance.hk\/test\/wordpress\/wp-content\/uploads\/2016\/05\/logo2-2.png\\\"){kind=logo}
\r\nwww.itsec.hk<\/a>
\r\nwww.itsec.vip<\/a>
\r\nwww.itseceu.uk<\/a>
<\/p>","protected":false},"excerpt":{"rendered":"<\/a> <\/a> <\/a> <\/a> <\/a> <\/a> <\/a> <\/a> <\/div>\n<\/div>","protected":false},"author":214,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"slim_seo":{"title":"Introduction to keytool - ITTeacherITFreelance.hk","description":"Learn how to generate certificates with keytool. "},"footnotes":""},"categories":[6],"tags":[],"_links":{"self":[{"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/posts\/62416"}],"collection":[{"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/users\/214"}],"replies":[{"embeddable":true,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/comments?post=62416"}],"version-history":[{"count":8,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/posts\/62416\/revisions"}],"predecessor-version":[{"id":65866,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/posts\/62416\/revisions\/65866"}],"wp:attachment":[{"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/media?parent=62416"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/categories?post=62416"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/tags?post=62416"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}