Java Tool Tutorials - Herong's Tutorial Notes
Dr. Herong Yang, Version 5.10

'keystore' - Public Key Certificate Storage File

This section describes what is a 'keystore' file and what features are supported on 'keystore' files.

"keystore" - A database used by JDK "keytool" command and KeyStore class to store your own private keys, and public key certificates you received from someone else. "keystore" supports the following features:

  • Two types of entries: key entries for private keys and certificate entries for public key certificates.
  • A key entry contains the private key and a certificate chain of the corresponding public key.
  • Every entry has a unique alias name.
  • Key entries are protected by separate passwords.
  • "keystore" may have different implementations from different security package providers. The default implementation from Sun is called JKS (Java KeyStore).

Sections in This Chapter

Certificates and Certificate Chains

'keystore' - Public Key Certificate Storage File

JDK 1.5 'keytool' - keystore File Management Commands

JDK 1.6 'keytool' - keystore File Management Commands

Generating Key Pairs and Self-Signed Certificates

Exporting and Import Certificates

Cloning Certificates with New Identities

Dr. Herong Yang, updated in 2008
'keystore' - Public Key Certificate Storage File