Learn_Keytool/Learn_Keytool_Part_2.txt at main · CyberHashira/Learn_Keytool · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
Learn Keytool Part 2
----------------------

# Generate keypair, use default keystore type and default keystore filename and location. Default keystore name is .keystore and default keystore location is
your home directory.
keytool -genkey


# List content of a default keystore. This will read .keystore file in your home directory.
keytool -list


# Display verbose output
keytool -list -v


# Display output in RFC format
keytool -list -rfc


# Generating a keypair with an alias. Default keystore name and location will be used.
keytool -genkey -alias TestingKey


# Generating a keypair with some additional details.
keytool -genkey -alias Apple -keyalg RSA -keysize 2048 -validity 365 -sigalg sha256WithRSA -dname "CN=Apple"


# Generating a keypair inside a user define keystore
keytool -genkey -alias mySigningKey -keyalg RSA -keysize 2048 -sigalg sha256WithRSA -keystore myStore.ks -dname "CN=mySigningKey"


# Generating an AES key using JKS keystore (Should fail). JKS keystores are not meant to store Secret Keys.
keytool -genseckey -alias myAesKey -keyalg AES -keysize 256 -keystore myStore.ks


# Generate an AES key using JCEKS. JCEKS can store all types of key.
keytool -genseckey -alias myAesKey -keyalg AES -keysize 256 -keystore myStore.jce -storetype jceks


# Generate a DES-3 key using JCEKS
keytool -genseckey -alias myDesKey -keyalg DESede -keystore myStore.jce -storetype jceks


# List jceks keystore
keytool -list -keystore myStore.jceks -storetype jceks


# Generate ECDSA key using JCEKS
keytool -genkey -alias myECKey2 -keyalg EC -groupname secp384r1 -sigalg sha256WithECDSA -validity 730 -keystore myStore.jce -storetype jceks -dname "CN=myECKey"


# Get a list of ECDSA curves
openssl ecparam -list_curves


# Generate RSA key inside a PKCS12 keystore
keytool -genkey -alias mySigningKey -keyalg RSA -keysize 2048 -sigalg sha256WithRSA -keystore myStore.p12 -storetype PKCS12 -dname "CN=mySigningKey"


# Generate AES key inside PKCS12 keystore
keytool -genseckey -alias myAesKey -keyalg AES -keysize 256 -keystore myStore.p12 -storetype pkcs12


# Generate ECDSA keypair inside PKCS12 keystore
keytool -genkey -alias myECKey2 -keyalg EC -groupname secp384r1 -sigalg sha256WithECDSA -validity 730 -keystore myStore.p12 -storetype pkcs12 -dname "CN=myECKey"


# Display content of a PKCS12 keystore
keytool -list -keystore myStore.p12 -storetype PKCS12