證書管理

keytool命令

echo 生成本地數字證書1 keytool -genkeypair -keyalg RSA -keysize 2048 -sigalg SHA1withRSA -validity 36000 -alias www.zlex.org -keystore zlex.keystore -storepass 123456echo 生成本地數字證書2 keytool -genkeypair -keyalg RSA -keysize 2048 -sigalg SHA1withRSA -validity 36000 -alias www.zlex.org -keystore zlex.keystore -storepass 123456 -dname "CN=www.zlex.org, OU=zlex, O=zlex, L=BJ, ST=BJ, C=CN"echo 導出數字證書 keytool -exportcert -alias www.zlex.org -keystore zlex.keystore -file zlex.cer -rfc -storepass 123456echo 打印數字證書 keytool -printcert -file zlex.cerecho 查看導入數字證書 keytool -list -alias www.zlex.org -keystore zlex.keystore -storepass 123456

openssl 命令

echo offecho 構建目錄mkdir certs mkdir crl mkdir newcerts mkdir privateecho 構建文件 echo 0>index.txt echo 01>serialecho 構建隨機數 openssl rand -out private/.rand 1000echo 產生私鑰 openssl genrsa -des3 -out private/ca.key.pem 2048echo 生成根證書請求 ca.csr openssl req -new -key private/ca.key.pem -out private/ca.csr -subj "/C=CN/ST=BJ/L=BJ/O=zlex/OU=zlex/CN=root.zlex.org"echo 簽發根證書 ca.cer openssl x509 -req -days 10000 -sha1 -extensions v3_ca -signkey private/ca.key.pem -in private/ca.csr -out certs/ca.cerecho 根證書轉換 ca.p12 openssl pkcs12 -export -clcerts -in certs/ca.cer -inkey private/ca.key.pem -out certs/ca.p12echo 頒發服務器證書 openssl genrsa -out private/server.key.pem 2048echo 生成服務器證書請求 server.csr openssl req -new -key private/server.key.pem -out private/server.csr -subj "/C=CN/ST=BJ/L=BJ/O=zlex/OU=zlex/CN=server.zlex.org"echo 簽發服務器證書 server.cer openssl x509 -req -days 3650 -sha1 -extensions v3_req -CA certs/ca.cer -CAkey private/ca.key.pem -CAserial ca.srl -CAcreateserial -in private/server.csr -out certs/server.cerecho 服務器證書轉換 server.p12 openssl pkcs12 -export -clcerts -in certs/server.cer -inkey private/server.key.pem -out certs/server.p12echo 產生客戶私鑰 openssl genrsa -des3 -out private/client.key.pem 2048echo 生成客戶證書請求 client.csr openssl req -new -key private/client.key.pem -out private/client.csr -subj "/C=CN/ST=BJ/L=BJ/O=zlex/OU=zlex/CN=client.zlex.org"echo 簽發客戶證書 client.cer openssl ca -in private/client.csr -days 3650 -out certs/client.cer -cert certs/ca.cer -keyfile private/ca.key.pem -notextecho 客戶證書轉換 client.p12 openssl pkcs12 -export -inkey private/client.key.pem -in certs/client.cer -out certs/client.p12echo 根密鑰庫轉換 ca.keystore keytool -importkeystore -v -srckeystore certs/ca.p12 -srcstorepass 123456 -destkeystore certs/ca.keystore -srcstoretype pkcs12 -deststorepass 123456 keytool -list -keystore certs/ca.keystore -v -storepass 123456echo 服務器密鑰庫轉換 server.keystore keytool -importkeystore -v -srckeystore certs/server.p12 -srcstorepass 123456 -destkeystore certs/server.keystore -srcstoretype pkcs12 -deststorepass 123456 keytool -list -keystore certs/server.keystore -v -storepass 123456echo 客戶密鑰庫轉換 client.keystore keytool -importkeystore -v -srckeystore certs/client.p12 -srcstorepass 123456 -destkeystore certs/client.keystore -srcstoretype pkcs12 -deststorepass 123456 keytool -list -keystore certs/client.keystore -v -storepass 123456pauseecho on

總結

以上是生活随笔為你收集整理的Java加密与解密的艺术~数字证书~证书管理的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。