Java KeyStore: Difference between revisions

Revision as of 20:28, 13 March 2018

Revision as of 10:17, 11 March 2019

Line 1:

A '''Java KeyStore''' ('''JKS''') is a repository of security certificates{{spaced ndash}} either [[authorization certificate]]s or [[public key certificate]]s{{spaced ndash}} plus corresponding private keys, used for instance in [[Transport Layer Security|SSL encryption]].

In [[IBM WebSphere Application Server]] and [[Oracle WebLogic Server]], a file with extension ''jks'' servesservices as keystore.

The [[Java Development Kit]] maintains a [[certificate authority|CA]] keystore in folder jre/lib/security/cacerts. JDKs provide a tool named ''keytool''<ref>[http://docs.oracle.com/javase/6/docs/technotes/tools/solaris/keytool.html keytool - Key and Certificate Management Tool]</ref> to manipulate the keystore. ''keytool'' has no functionality to extract the private key out of the keystore, but this is possible with third-party tools like jksExportKey, CERTivity,<ref>[http://www.edulib.com/products/keystores-manager/ CERTivity - A multi-platform visual tool for managing keystores]</ref> Portecle<ref>[http://portecle.sourceforge.net Portecle - Portecle is an open-source GUI application for creating, managing and examining keystores.]</ref> and KeyStore Explorer.<ref>[http://keystore-explorer.org KeyStore Explorer - An open source GUI replacement for the Java command-line utilities keytool, jarsigner and jadtool.]</ref>