create_keystore.bat

身份认证和数字签名在实际应用中是通过以数字证书为核心的公开密钥基础结构(PKI)来实现的

echo off
echo **********************************
echo *    生成演示JSPE用的证书和密钥  *
echo **********************************
echo 生成用户私钥库.....(password:okokok)
keytool -v -genkey -alias mykey -dname "CN=zhangfengling, OU=zsusoft, O=zsu, L=Guangzhou, S=Guangdong, C=cn" -keystore clientks -keyalg RSA -sigalg SHA1withRSA -validity 720 -storepass okokok -keypass okokok
dir clientks
echo 生成银行私钥.....(password:okokok)
keytool -genkey -alias mykey -dname "CN=bank, OU=Science Department, O=ABCGD, L=Guangzhou, S=Guangdong, C=cn" -keystore bankks -keyalg RSA -sigalg SHA1withRSA -validity 720 -storepass okokok -keypass okokok
dir bankks
echo 生成银行信任证书....(password:bankcert)
keytool -export -keystore bankks  -file bank.cer  -rfc -storepass okokok
keytool -import -alias bank -keystore bankts -file bank.cer -storepass bankcert -noprompt
start bank.cer
dir bankts
echo 输出用户信任证书....(password:clientcert)
keytool -export -keystore clientks -file client.cer -rfc  -storepass okokok
keytool -import -alias client -keystore clientts -file client.cer -storepass clientcert -noprompt
start client.cer
dir clientts