keytool使用

 创建Keys

 

1.创建一个私钥放入keystore里，使用alias and password = "myAlias"/"myAliasPassword"。

 

keytool -genkey -alias myAlias -keypass myAliasPassword -keystore privatestore.jks -storepass keyStorePassword -dname "cn=myAlias" -keyalg RSA

 keytool -genkey -alias client-344-839 -keypass client344Password  -keystore clientStore.jks -storepass keystorePass  -dname "cn=client-344-839" -keyalg RSA

 

 

-genkey表示要创建一个新的密钥

-alias密钥的别名myAlias

-keypass私有密钥的密码，这里设置为myAliasPassword

-keystore 密钥 -keystore D:\jdk6\bin 保存在D:\jdk6\bin目录下的mykeystore文件中

-storepass 存取密码，这里设置为keyStorePassword ，这个密码提供系统从mykeystore文件中将信息取出
-dname表示密钥的Distinguished Names，
        CN=commonName
        OU=organizationUnit
        O=organizationName
        L=localityName
        S=stateName
        C=country

在这种情况下，我们使用的是RSA 运算

 

2. 证书：Self-sign our certificate (in production environment this will be done by a company like Verisign).

keytool -selfcert -alias myAlias -keystore privatestore.jks -storepass keyStorePassword -keypass myAliasPassword

keytool -selfcert -alias client-344-839  -keystore clientStore.jks -storepass keystorePass  -keypass client344Password  

 

3. Export the public key from our private keystore to file named key.rsa  导入私钥到key.rsa

keytool -export -alias myAlias -file key.rsa -keystore privatestore.jks -storepass keyStorePassword

keytool -export -alias client-344-839  -file key.rsa -keystore clientStore.jks  -storepass keystorePass

 

 

4.Import the public key to new keystore:导入公钥到新的keystore中：

keytool -import -alias myAlias  -file key.rsa -keystore publicstore.jks -storepass keyStorePassword

keytool -import -alias serveralias  -file key.rsa -keystore serverStore.jks -storepass keystorePass  -keypass aliaspass 

 

 

 5、 创建insecurity.properties:

org.apache.ws.security.crypto.provider=org.apache.ws.security.components.crypto.Merlin
//设置文件类型
org.apache.ws.security.crypto.merlin.keystore.type=jks
//serverStore.jks公钥的存取密码
org.apache.ws.security.crypto.merlin.keystore.password=keystorePass
org.apache.ws.security.crypto.merlin.alias.password=aliaspass
//公钥的别名
org.apache.ws.security.crypto.merlin.keystore.alias=serveralias
//公钥文件的路径
org.apache.ws.security.crypto.merlin.file=META-INF/xfire/serverStore.jks