使用keytool對證書進行操作

JDK的證書默認密碼爲changeit
注意：win7情況下要使用管理員賬號運行cmd

1、list 證書

keytool -list -keystore "%JAVA_HOME%\jre\lib\security\cacerts" -alias sso.xxx.com

2、生成證書

keytool -genkey -alias sso.xxx.com -keyalg RSA -keystore d:/security/xxx-sso -validity 1000 -dname "CN=sso.xxx.com, OU=xxx, O=xxx, L=guangzhou, ST=guangdong, C=ZH"

3、導出證書

keytool -export -file d:/security/xxx-sso.crt -alias sso.xxx.com -keystore d:/security/xxx-sso

4、爲客戶端的jvm導入證書

keytool -import -keystore "%JAVA_HOME%\jre\lib\security\cacerts" -file D:/security/xxx-sso.crt -alias sso.xxx.com -storepass changeit

5、刪除證書

keytool -delete -keystore "%JAVA_HOME%\jre\lib\security\cacerts" -alias sso.xxx.com