What Is Java KeyStore

PKI Certificate Tutorials - Herong's Tutorial Examples

∟What Is Java KeyStore

This section describes what is Java KeyStore - a database file used by older Android systems and Java applications to store PKI certificates.

What Is Java KeyStore? Java KeyStore is a database file used by older Android systems and Java applications to store PKI certificates. Newer versions of Java applications are using PKCS12 database files now.

Main features of Java KeyStore are:

Java KeyStore is a single file in JKS (Java KeyStore) format defined as part the Java standard.
Java KeyStore files are password protected.
Self-signed certificates in Java KeyStore files include their private keys.
The Java KeyStore file for trusted root CA certificates is located at $JAVA_HOME/jre/lib/security/cacerts on most computers. Its password is "changeit".
The "keytool" command provided in JDK (Java Development Kit) can be used manage certificates in the Java KeyStore.
Linux Trust Store also maintains a Java KeyStore file for trusted root CA certificates at /etc/pki/ca-trust/extracted/java/cacerts. Its password is also "changeit".