"keytool" - Key and Certificate Management Tool

PKI Certificate Tutorials - Herong's Tutorial Examples

∟Java "keytool" Commands and KeyStore Files

∟"keytool" - Key and Certificate Management Tool

This section provides a quick introduction of 'keytool' - a command line tool to manage private keys and public certificates in 'keystore' database file.

"keytool" is command line tool included in JDK (Java Development Kit) to manage keys and certificates inside Java KeyStore files.

Note that the JRE (Java Runtime Environment) does not support the "keytool" command. You need to install the JDK package to use "keytool". See "JDK Tutorials - Herong's Tutorial Examples" at herongyang.com/JDK/ for more information on JDK.

"keytool" offers a number functions through the following command options:

"-certreq": Generates a CSR (Certificate Signing Request).
"-changealias": Changes an entry's alias name.
"-delete": Deletes the entry of a given alias name.
"-exportcert (-export)": Exports the certificate of the specified key entry or certificate entry out of the keystore to a certificate file.
"-gencert": Generates certificate from a certificate request.
"-genkeypair (-genkey)": Generates a key pair and stores it as a key entry in the keystore.
"-genseckey": Generates a secret key.
"-importcert (-import)": Imports the certificate from a certificate file as a certificate entry into the keystore.
"-importkeystore": Imports one or all entries from another keystore.
"-importpass": Imports a password.
"-keypasswd": Changes the key password of an entry.
"-keyclone": Creates a new key entry by copying an existing key entry.
"-list": Lists all entries in the keystore.
"-printcert": Prints summary information of a certificate from a certificate file.
"-printcertreq": Prints the content of a certificate request.
"-printcrl": Prints the content of a CRL (Certificate Revocation List) file.
"-selfcert": Update the self-signed certificate in a key entry.
"-showinfo": Displays security-related information.
"-storepasswd": Changes the store password of a keystore.