Java KeyStore: Difference between revisions

Revision as of 13:07, 3 December 2010

Latest revision as of 21:30, 19 February 2024

(64 intermediate revisions by 46 users not shown)

Line 1:

{{Short description|Software development tool for security}}

{{orphan|date=May 2010}}

A '''Java KeyStore''' ('''JKS''') is a [[content repository|repository]] of security certificates{{spaced ndash}} either [[authorization certificate]]s or [[public key certificate]]s{{spaced ndash}} plus corresponding [[Private key|private keys]], used for instance in [[Transport Layer Security|TLS encryption]].

In [[IBM WebSphere Application Server]] and [[Oracle WebLogic serverServer]], a file with extension [[''jks]]'' serves as a keystore.

A '''keystore''' is a repository of security certificates, either [[Certification Authority Certificate]]s or [[Public key certificate]]s - used for instance in [[Transport_Layer_Security|SSL encryption]].

The [[Java Development Kit]] maintains a [[certificate authority|CA]] keystore file named ''cacerts'' in folder ''jre/lib/security''. JDKs provide a tool named ''keytool''<ref>[https://docs.oracle.com/en/java/javase/17/docs/specs/man/keytool.html The ''keytool'' Command - a key and certificate management utility ]</ref> to manipulate the keystore. ''keytool'' has no functionality to extract the private key out of the keystore, but this is possible with third-party tools like jksExportKey, CERTivity,<ref>[http://www.edulib.com/products/keystores-manager/ CERTivity - A multi-platform visual tool for managing keystores]</ref> Portecle<ref>[http://portecle.sourceforge.net Portecle - Portecle is an open-source GUI application for creating, managing and examining keystores.]</ref> and KeyStore Explorer.<ref>[http://keystore-explorer.org KeyStore Explorer - An open source GUI replacement for the Java command-line utilities keytool, jarsigner and jadtool.]</ref>

In WebLogic server, a file with extension [[jks]] serves as keystore.

==See also==

The [[Java_(programming_language)|Java]] JDK maintains a CAC keystore in jre/lib/security/cacerts. JDKs provide a tool keytool <ref>[http://java.sun.com/javase/6/docs/tooldocs/solaris/keytool.html keytool - Key and Certificate Management Tool]</ref> to manipulate the keystore.

*[[Java Secure Socket Extension]]

*[[Keyring (cryptography)]]

*[[Public key infrastructure]]

==References==

{{Reflist}}

==External links==

* [https://docs.oracle.com/javase/8/docs/api/java/security/KeyStore.html Javadoc for KeyStore]

[[Category:Public-key cryptography]]

[[Category:Java development tools]]

{{Computer-security-stub}}