Creating ssl certificates using java keytool

Creating ssl certificates using java keytool

	D:\Softwares\Portecle\portecle-1.7>keytool -export tomcat -storepass rsiddms -fi
	le ssoServer.cer -keystore ssoServer.jks
	keytool error: java.lang.RuntimeException: Usage error, tomcat is not a legal co
	mmand
	\\missing -alias above.
	D:\Softwares\Portecle\portecle-1.7>keytool -export -alias tomcat -storepass rsid
	dms -file ssoClient.cer -keystore ssoClient.jks
	Certificate stored in file <ssoClient.cer>
	D:\Softwares\Portecle\portecle-1.7>keytool -import -v -alias tomcat -file ssoSer
	ver.cer -keypass rsiddms -storepass rsiddms -keystore %JAVA_HOME%/jre/lib/securi
	ty/cacerts
	keytool error: java.io.IOException: Keystore was tampered with, or password was
	incorrect
	java.io.IOException: Keystore was tampered with, or password was incorrect
	at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:771)
	at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:3
	8)
	at java.security.KeyStore.load(KeyStore.java:1185)
	at sun.security.tools.KeyTool.doCommands(KeyTool.java:620)
	at sun.security.tools.KeyTool.run(KeyTool.java:172)
	at sun.security.tools.KeyTool.main(KeyTool.java:166)
	Caused by: java.security.UnrecoverableKeyException: Password verification failed
	at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:769)
	... 5 more
	// While trying to store the certificates using import getting above error.
	//Successful Import as below
	C:\Java\jdk1.6.0_24\jre\lib\security>keytool -import -v -alias tomcat -file ssoS
	erver.cer -keypass rsiddms -keystore %JAVA_HOME%/jre/lib/security/cacerts
	Enter keystore password:
	Owner: CN=ssoserver.shibaram.com, OU=sso, O=rsi, L=bangalore, ST=karnatak, C=IN,
	EMAILADDRESS=mspsahoo@gmail.com
	Issuer: CN=ssoserver.shibaram.com, OU=sso, O=rsi, L=bangalore, ST=karnatak, C=IN
	, EMAILADDRESS=mspsahoo@gmail.com
	Serial number: 519a1912
	Valid from: Mon May 20 18:07:38 GMT+05:30 2013 until: Tue May 20 18:07:38 GMT+05
	:30 2014
	Certificate fingerprints:
	MD5: FB:13:F1:03:80:03:4C:5A:EA:03:B8:09:CF:DC:5E:A8
	SHA1: 46:B6:B0:DB:D6:CC:12:85:98:C3:1F:70:1D:53:C0:E2:A5:EB:44:30
	Signature algorithm name: SHA1withRSA
	Version: 1
	Trust this certificate? [no]: yes
	Certificate was added to keystore
	[Storing C:\Java\jdk1.6.0_24/jre/lib/security/cacerts]
	// To list out all the certificates stored in the keystore
	C:\Java\jdk1.6.0_24\jre\lib\security>keytool -list -keystore cacerts
	Enter keystore password:

view raw java keytool creating certificates hosted with ❤ by GitHub