JDK的keytool证书管理命令
#--------------------------------------------------------
# 创建新证书
#--------------------------------------------------------
keytool -genkey -alias tomcat -keyalg RSA -keypass changeit -storepass changeit -keystore d:\server.keystore -dname "CN=localhost, OU=localhost, O=localhost, L=SH, ST=SH, C=CN" -validity 3600
#--------------------------------------------------------
# 导出证书
#--------------------------------------------------------
keytool -export -trustcacerts -alias tomcat -file d:\server.cer -keystore d:\server.keystore -storepass changeit
#--------------------------------------------------------
# 导入证书到jdk的证书库[\jre\lib\security\cacerts]中
#--------------------------------------------------------
keytool -import -trustcacerts -alias tomcat -file d:\server.cer -keystore D:\j2se\j2se_1.4.2\jre\lib\security\cacerts -storepass changeit
如果有提示,输入Y就可以了。
#--------------------------------------------------------
# 列出信任证书库中所有已有证书
#--------------------------------------------------------
keytool -list -keystore D:\j2se\j2se_1.4.2\jre\lib\security\cacerts -storepass changeit
#--------------------------------------------------------
# 删除库中某个证书
#--------------------------------------------------------
keytool -delete -trustcacerts -alias tomcat -keystore D:\j2se\j2se_1.4.2\jre\lib\security\cacerts -storepass changeit