How to generate keystore and truststore

by

I followed This link.

1.Generate keystore(At server):

keytool -genkey -alias bmc -keyalg RSA -keystore KeyStore.jks -keysize 2048

2.Generate new ca-cert and ca-key:

openssl req -new -x509 -keyout ca-key -out ca-cert

3.Extracting cert/creating cert sign req(csr):

keytool -keystore KeyStore.jks -alias bmc -certreq -file cert-file

4.Sign the “cert-file” and cert-signed wil be the new cert:

openssl x509 -req -CA ca-cert -CAkey ca-key -in cert-file -out 
       cert-signed -days 365 -CAcreateserial -passin pass:yourpass

5.importing the ca-cert to keystore file:

keytool -keystore KeyStore.jks -alias CARoot -import -file ca-cert

6.import cert-signed to keystore:

keytool -keystore KeyStore.jks -alias bmc -import -file cert-signed

7.Copy ca-cert into client machine and generate truststore: (At client)

keytool -keystore truststore.jks -alias bmc -import -file ca-cert-s

8.Copy ca-cert into client machine and generate truststore: (At server)

keytool -keystore truststore.jks -alias bmc -import -file ca-cert-c

**Repeat the step(1-6) at client side and generate truststore at server side by importing ca-cert of client(step 8)

Renamed ca-cert after step 6.

Ex: ca-cert-s generated at server side and ca-cert-c at client and exchanged each other for generating truststore.

More Related Contents:

  1. Truststore and Keystore Definitions
  2. How can I use different certificates on specific connections?
  3. Using a custom truststore in java as well as the default one
  4. java – path to trustStore – set property doesn’t work?
  5. Difference between .keystore file and .jks file
  6. Setting multiple truststore on the same JVM
  7. SSL and cert keystore
  8. Android: I lost my android key store, what should I do? [duplicate]
  9. How to properly import a selfsigned certificate into Java keystore that is available to all Java applications by default?
  10. Digital Certificate: How to import .cer file in to .truststore file using?
  11. Import PEM into Java Key Store
  12. keytool error Keystore was tampered with, or password was incorrect
  13. Does Java support Let’s Encrypt certificates?
  14. Import certificate as PrivateKeyEntry
  15. How can I get a list of trusted root certificates in Java?
  16. Forgot Keystore password, thinking of Brute-Force detection. will it corrupt the keystore?
  17. How do I securely store encryption keys in java? [closed]
  18. Key hash for Facebook Android SDK
  19. Specifying trust store information in spring boot application.properties
  20. Configure Eclipse to use signed keystore
  21. Android App Installation Failed: Package com.my.app has no certificates at entry AndroidManifest.xml
  22. Wrong version of keystore on android call
  23. How can I specify location of debug keystore for Android ant debug builds?
  24. Using SSLContext with just a CA certificate and no keystore
  25. How to configure trustStore for javax.net.ssl.trustStore on windows?
  26. Android keystore stopped working
  27. Using the same debug keystore on multiple computers
  28. How to build a SSLSocketFactory from PEM certificate and key without converting to keystore?
  29. Android Keystore File Lost [duplicate]
  30. How do I list / export private keys from a keystore?

Leave a Comment