Java "keytool -genkeypair" Command Options
What options are supported by the "keytool -genkeypair" command?
Java Keytool can be used to generate a pair of public key and private key with the "keytool -genkeypair" command, which supports the following options:
C:\Users\fyicenter>"\Program Files\java\jre7\bin\keytool" -genkeypair -help keytool -genkeypair [OPTION]... Generates a key pair Options: -alias <alias> alias name of the entry to process -keyalg <keyalg> key algorithm name -keysize <keysize> key bit size -sigalg <sigalg> signature algorithm name -destalias <destalias> destination alias -dname <dname> distinguished name -startdate <startdate> certificate validity start date/time -ext <value> X.509 extension -validity <valDays> validity number of days -keypass <arg> key password -keystore <keystore> keystore name -storepass <arg> keystore password -storetype <storetype> keystore type -providername <providername> provider name -providerclass <providerclass> provider class name -providerarg <arg> provider argument -providerpath <pathlist> provider classpath -v verbose output -protected password through protected mechanism Use "keytool -help" for all available commands
Generates a key pair (a public key and associated private key). Wraps the public key into an X.509 v3 self-signed certificate, which is stored as a single-element certificate chain. This certificate chain and the private key are stored in a new keystore entry identified by alias.
keyalg specifies the algorithm to be used to generate the key pair, and keysize specifies the size of each key to be generated. sigalg specifies the algorithm that should be used to sign the self-signed certificate; this algorithm must be compatible with keyalg.
dname specifies the X.500 Distinguished Name to be associated with alias, and is used as the issuer and subject fields in the self-signed certificate. If no distinguished name is provided at the command line, the user will be prompted for one.
keypass is a password used to protect the private key of the generated key pair. If no password is provided, the user is prompted for it. If you press RETURN at the prompt, the key password is set to the same password as that used for the keystore. keypass must be at least 6 characters long.
startdate specifies the issue time of the certificate, also known as the "Not Before" value of the X.509 certificate's Validity field.
valDays specifies the number of days (starting at the date specified by -startdate, or the current date if -startdate is not specified) for which the certificate should be considered valid.
2012-07-19, 13342👍, 0💬
How to view the server certificate using the OpenSSL "s_client -connect" command? You can get the se...
Why I am getting the "Your connection is not secure" error screen in Firefox? You will see the "Your...
How to delete a certificate from a certificate store using "certmgr.msc"? The certificate has been e...
How to export a certificate out of certificate keystores managed by Java Control Panel? If you want ...
What can I use OpenSSL "x509" command for? What are options supported by the "x509" command? OpenSSL...