数字证书: 如何使用。信任存储文件导入？

有没有人遇到过。信托商店的文件？知道如何进口。Cer into.信托商店的文件？

我不确定是否必须使用 JavaKeytool 或 Linux 命令(如 openssl 命令)。

谢谢

267439 次浏览
小开
最佳答案 
# Copy the certificate into the directory Java_home\Jre\Lib\Security
# Change your directory to Java_home\Jre\Lib\Security>
# Import the certificate to a trust store.


keytool -import -alias ca -file somecert.cer -keystore cacerts -storepass changeit [Return]


Trust this certificate: [Yes]

changeit is the default truststore password

小开

Instead of using sed to filter out the certificate, you can also pipe the openssl s_client output through openssl x509 -out certfile.txt, for example:

echo "" | openssl s_client -connect my.server.com:443 -showcerts 2>/dev/null | openssl x509 -out certfile.txt
小开

The way you import a .cer file into the trust store is the same way you'd import a .crt file from say an export from Firefox.

You do not have to put an alias and the password of the keystore, you can just type: 

keytool -v -import -file somefile.crt  -alias somecrt -keystore my-cacerts

Preferably use the cacerts file that is already in your Java installation (jre\lib\security\cacerts) as it contains secure "popular" certificates.

Update regarding the differences of cer and crt (just to clarify) According to Apache with SSL - How to convert CER to CRT certificates? and user @Spawnrider

CER is a X.509 certificate in binary form, DER encoded.
CRT is a binary X.509 certificate, encapsulated in text (base-64) encoding.
It is not the same encoding.


提交答案