keytool生成密钥与证书并在nginx配置https

约定不等于承诺〃 2023-02-19 06:28 28阅读 0赞

### 前提 ###

安装好JDK环境

--------------------

### 生成密钥 ###

keytool -genkey -alias uat -keypass password -keyalg RSA -keysize 1024 -validity 365 -keystore E:/keystore/uat.keystore -storepass password

E:/keystore/uat.keystore为生成文件的位置，密码为 password

--------------------

### 导出证书 ###

keytool -export -alias uat -keystore E:/keystore/uat.keystore -storepass password -rfc -file E:/keystore/uat.cer

E:/keystore/uat.cer 为生成文件的位置

--------------------

### 解析出密钥 ###

使用Java代码辅助

try {
                BASE64Encoder encoder = new BASE64Encoder();
                //读取文件内容
                FileInputStream is = new FileInputStream("E:/JXD/keystore/uat.keystore");
                KeyStore ks = KeyStore.getInstance("JKS");
                ks.load(is, "password".toCharArray());
                PrivateKey key = (PrivateKey) ks.getKey("uat", "password".toCharArray());
                String encoded = encoder.encode(key.getEncoded());
                System.out.println(encoded);
                is.close();
            } catch (Exception e){
            }

将输出的内容保存到自己新建的key文件，可以新建一个文本文档然后改一下后缀

--------------------

### 修改nginx配置 ###

位置：nginx—conf—nginx.conf

listen       443;
    server_name  localhost;
    ssl on; #开启SSL
    ssl_certificate E:/keystore/uat.cer; #SSL证书
    ssl_certificate_key E:/keystore/uat.key; #SSL密钥

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3poZW5neWlrdWFuZ2dl_size_16_color_FFFFFF_t_70]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3poZW5neWlrdWFuZ2dl_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20200619143559250.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3poZW5neWlrdWFuZ2dl,size_16,color_FFFFFF,t_70