新建keystore文件
keytool -genkeypair -keyalg RSA -keystore testKeyStore.jks -dname "CN=denglintao.com, OU=ZooKeeper, O=Apache, L=Unknown, ST=Unknown, C=Unknown”
将私钥生成证书
keytool -export -keystore testKeyStore.jks -rfc -file cert.cer
将证书文件导入testTrustStore
keytool -import -file cert.cer -keystore testTrustStore.jks
查看证书
keytool -list -v -keystore testTrustStore.jks
将 jsk转为 p12 在转pem
keytool -importkeystore -srckeystore testKeyStore.jks -destkeystore testKeyStore.p12 -srcstoretype jks -deststoretype pkcs12
openssl pkcs12 -nodes -in testKeyStore.p12 -out testKeyStore.pem
openssl x509 -in testKeyStore.pem -pubkey -noout
keytool -importkeystore -srckeystore testTrustStore.jks -destkeystore testTrustStore.p12 -srcstoretype jks -deststoretype pkcs12
openssl pkcs12 -nodes -in testTrustStore.p12 -out testTrustStore.pem
openssl x509 -in testTrustStore.pem -pubkey -noout
