Java笔记-keytool生成SSL双向证书

- 日理万妓 2022-11-28 13:45 223阅读 0赞

逻辑是这样的：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxNzg0NDI3NjE_size_16_color_FFFFFF_t_70][]

如果要将其导出成client\_trust.jks文件，对应的客户端命令为：

@echo on
    keytool -genkeypair -keyalg RSA -dname "CN=localhost" -alias client -keystore client.jks -keypass cccccc -storepass cccccc
    
    keytool -exportcert -file client.cer -alias client -keystore client.jks -storepass cccccc
    
    keytool -importcert -file client.cer -alias client -keystore server_trust.jks -storepass cccccc -keypass cccccc

服务端命令为：

@echo on
    keytool -genkeypair -keyalg RSA -dname "CN=localhost" -alias server -keystore server.jks -keypass cccccc -storepass cccccc
    keytool -exportcert -file server.cer -alias server  -keystore server.jks -storepass cccccc
    keytool -importcert -file server.cer -alias server -keystore client_trust.jks -storepass cccccc -keypass cccccc

如果要导到client.jks及server.jks对应的命令为：

keytool -import -trustcacerts -alias client -file client.cer -keystore server.jks -storepass cccccc
    keytool -import -trustcacerts -alias server -file server.cer -keystore client.jks -storepass cccccc

这里windows上可以使用批处理文件。做个脚本去搞，方便快捷：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxNzg0NDI3NjE_size_16_color_FFFFFF_t_70 1][]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxNzg0NDI3NjE_size_16_color_FFFFFF_t_70]: /images/20221124/6917fcb0fae44263b6f451a300a65155.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxNzg0NDI3NjE_size_16_color_FFFFFF_t_70 1]: /images/20221124/bb4e52ee08a74231abbe7a9221e4bbc6.png