domingo, 12 de julio de 2015

SSL - Crear csr, keystore, añadir certificado a keystore.

keytool -genkey -alias ttooc -keyalg RSA -keysize 2048 -keysotre ./keystore_.jks

keytool -certreq -keyalg RSA -alias ttooc -file certreq.csr -keystore keystore_.jks

Comprobamos:

openssl req -noout -text -in certreq.csr

Añadir CA:

    openssl x509 -outform der -in certificate.pem -out certificate.der
    keytool -import -trustcacerts -alias root -file certificate.der -keystore keystore.jks
      
    Añadir cert firmado:
    keytool -import -trustcacerts -alias mydomain -file mydomain.crt -keystore keystore.jks