keytool
TLDR
Generate key pair
$ keytool -genkeypair -alias [mykey] -keystore [keystore.jks]
List keystore contents$ keytool -list -keystore [keystore.jks]
Export certificate$ keytool -exportcert -alias [mykey] -keystore [keystore.jks] -file [cert.cer]
Import certificate$ keytool -importcert -alias [trusted] -file [cert.cer] -keystore [keystore.jks]
Change keystore password$ keytool -storepasswd -keystore [keystore.jks]
Delete entry$ keytool -delete -alias [mykey] -keystore [keystore.jks]
SYNOPSIS
keytool command [options]
DESCRIPTION
keytool manages Java keystores and certificates. It generates keys, imports/exports certificates, and manages trust stores.
The tool is essential for SSL/TLS configuration. It handles keystore formats like JKS and PKCS12.
keytool manages Java certificates.
PARAMETERS
-genkeypair
Generate key pair.-list
List keystore entries.-exportcert
Export certificate.-importcert
Import certificate.-alias NAME
Entry alias.-keystore FILE
Keystore file.-storepass PASS
Keystore password.--help
Display help information.
CAVEATS
Part of JDK. Password management important. Multiple keystore formats.
HISTORY
keytool has been part of the JDK since early versions, providing certificate and key management for Java applications.


