java¼ÓÃÜÓë½âÃÜ£¨¶þ£©

Êý×ÖÖ¤Ê飺
  £¨Ò»£©Ö¤Êé¹ÜÀí
    1.keyToolÖ¤Êé¹ÜÀí
    £¨1£©  ±¾µØÊý×ÖÖ¤ÊéÉú³ÉÃüÁî
   keytool -genkeypair -alias www.zlex.org  -keyalg RSA -keysize 2048 -sigalg SHA1withRSA -validity 36000 -keystore zlex.keystore  -dname "CN=www.zlex.org,OU=zlex,O=zlex,L=SH,ST=SH,C=CN"
    Êý×ÖÖ¤Êéµ¼³öÃüÁî
   keytool -exportcert -alias www.zlex.org -keystore zlex.keystore -file zlex.cer -rfc
    ´òÓ¡Êý×ÖÖ¤ÊéÃüÁî
   keytool -printcert -file zlex.cer   
   £¨2£©¹¹½¨CAÇ©·¢Ö¤Êé
    µ¼³öÊý×ÖÖ¤ÊéÇ©·¢ÉêÇëÃüÁî
    keytool -certreq -alias www.zlex.org -keystore zlex.keystore -file zlex.csr -v
    µ¼ÈëÊý×ÖÖ¤ÊéÃüÁî
    keytool -importcert  -trustcacerts -alias www.zlex.org -file zlex.cer -keystore zlex.keystore
    ²é¿´µ¼ÈëÊý×ÖÖ¤ÊéÃüÁî
   keytool -list -alias www.zlex.org  -keystore zlex.keystore
    2 OpenSSLÖ¤Êé¹ÜÀí
     ´Óhttp://www.slproweb.com/products/Win32OpenSSL.htmlÏÂÔØwindows°æOpenSSL
    openssl rand -out private/.rand 1000
    openssl genrsa -aes256 -out private/ca.key.pem 2048
    openssl -req -new -key private/ca.key.pem -out private/ca.csr
    openssl x509 -req -days 10000 -sha1 -extensions    v3_ca -signkey private/ca.key.pem -in private/ca.csr -out 
          certs/ca.cer
    openssl pkcs12 -export -cacerts -inkey private/ca.key.pem -in certs/ca.cer -out certs/ca.p12
    keytool -list -keystore certs/ca.p12 -storetype pkcs12 -v -storepass 123456