Skip to content

Generating SSL Server CSR with Keytool

Jump to bottom
Endi S. Dewata edited this page Aug 7, 2024 · 3 revisions

Generating SSL Server Key

To generate an RSA key:

$ keytool \
    -genkeypair \
    -keystore keystore.p12 \
    -storetype pkcs12 \
    -storepass Secret.123 \
    -alias sslserver \
    -dname "CN=$HOSTNAME" \
    -keyalg RSA \
    -keypass Secret.123

To generate an ECC key:

$ keytool \
    -genkeypair \
    -keystore keystore.p12 \
    -storetype pkcs12 \
    -storepass Secret.123 \
    -alias sslserver \
    -dname "CN=$HOSTNAME" \
    -keyalg EC \
    -keypass Secret.123

Creating SSL Server CSR

$ keytool \
    -certreq \
    -keystore keystore.p12 \
    -storetype pkcs12 \
    -storepass Secret.123 \
    -alias sslserver \
    -file sslserver.csr

See Also

Tip
 To find a page in the Wiki, enter the keywords in search field, press Enter, then click Wikis.
Clone this wiki locally