keytool -keystore cacerts -import cert -alias DigiCertApiCA -file C:\Admin\certs\DigiCertCA.crt
keytool -storepasswd -keystore "C:\Program Files\Java\jre1.6.0_03\lib\security\cacerts"
https://support.quovadisglobal.com/kb/a401/how-do-i-generate-a-csr-for-jboss-using-keytool.aspx
------------------------------------- create cert for wildfly----------------------------------------------------
// how to create key and request file
// first of all, download openssl tool and save it somewhere on the machine.
// steps to create key and cert request file.
set OPENSSL_CONF=C:\Admin\OpenSSL\bin\openssl.cnf
openssl genrsa -out C:\Admin\certopenssl\dshsapoly3uat01.key 2048
openssl req -new -sha256 -key C:\Admin\certopenssl\dshsapoly3uat01.key -out C:\Admin\certopenssl\dshsapoly3uat01.csr
//this command is to view the csr, not a necessary step
openssl req -noout -text -in C:\Admin\certopenssl\dshsapoly3uat01.csr
// send your csr to WaTech or any other CA and get cer files from your CA before running the following commands.
//create pfx file
openssl pkcs12 -export -out C:\Programs\wildfly-10.1.0.Final\domain-host1\configuration\dshsapoly3uat01.pfx -inkey C:\Programs\wildfly-10.1.0.Final\domain-host1\configuration\dshsapoly3uat01.key -in C:\Programs\wildfly-10.1.0.Final\domain-host1\configuration\dshsapoly3uat01.cer
// create keystore
"C:\Programs\jdk1.8.0_121\bin\keytool" -importkeystore -srckeystore dshsapoly3uat01.pfx -srcstoretype pkcs12 -destkeystore dshsapoly3uat01.jks -deststoretype JKS
// change alias if necessary
"C:\Programs\jdk1.8.0_121\bin\keytool" -changealias -alias "te-93ac6810-4331-41b9-b99a-efd06df5ec5b" -destalias "uat01" -keypass uat01pass -keystore dshsapoly3uat01.jks -storepass changed
// change private key password (keypass)
"C:\Programs\jdk1.8.0_121\bin\keytool" -keypasswd -alias uat01 -keystore dshsapoly3uat01.jks
// view your keystore file and check the alias name in the file
"C:\Programs\jdk1.8.0_121\bin\keytool" -v -list -keystore dshsapoly3flp01.jks
------------------------------------some extra docs----------------------------------------------
"C:\Programs\jdk1.8.0_121\bin\keytool" -genkey -alias server -keyalg RSA -keysize 2048 -keystore dshsapoly3uat01.jks -dname "CN=dshsapoly3uat01.dshs.wa.lcl, OU=CATS, O=DSHS, L=Olympia, ST=WA, C=US"
"C:\Programs\jdk1.8.0_121\bin\keytool" -certreq -alias server -file dshsapoly3uat01.csr -keystore dshsapoly3uat01.jks
"C:\Programs\jdk1.8.0_121\bin\keytool" -import -trustcacerts -alias dshsapoly3uat01 -file dshsapoly3uat01.cer -keystore application.keystore
"C:\Programs\jdk1.8.0_121\bin\keytool" -genkey -alias server -keyalg RSA -keysize 2048 -keystore dshsapoly3uat02.jks -dname "CN=dshsapoly3uat02.dshs.wa.lcl, OU=CATS, O=DSHS, L=Olympia, ST=WA, C=US"
"C:\Programs\jdk1.8.0_121\bin\keytool" -certreq -alias server -file dshsapoly3uat02.csr -keystore dshsapoly3uat02.jks
"C:\Programs\jdk1.8.0_121\bin\keytool" -v -list -keystore dshsapoly3uat01.jks
keytool -delete -alias server -keystore application.keystore -storepass password
"C:\Programs\jdk1.8.0_121\bin\keytool" -import -trustcacerts -alias server -file dshsapoly3uat01.cer -keystore dshsapoly3uat01.jks
// how to create key and reqest file
set OPENSSL_CONF=C:\Admin\OpenSSL\bin\openssl.cnf
openssl genrsa -out C:\Admin\certopenssl\dshsapoly3uat01.key 2048
openssl req -new -sha256 -key C:\Admin\certopenssl\dshsapoly3uat01.key -out C:\Admin\certopenssl\dshsapoly3uat01.csr
openssl req -noout -text -in C:\Admin\certopenssl\dshsapoly3uat01.csr
openssl pkcs12 -export -out C:\Programs\wildfly-10.1.0.Final\domain-host1\configuration\dshsapoly3uat01.pfx -inkey C:\Programs\wildfly-10.1.0.Final\domain-host1\configuration\dshsapoly3uat01.key -in C:\Programs\wildfly-10.1.0.Final\domain-host1\configuration\dshsapoly3uat01.cer
"C:\Programs\jdk1.8.0_121\bin\keytool" -importkeystore -srckeystore dshsapoly3uat01.pfx -srcstoretype pkcs12 -destkeystore dshsapoly3uat01.jks -deststoretype JKS
"C:\Programs\jdk1.8.0_121\bin\keytool" -v -list -keystore dshsapoly3flp01.jks
openssl pkcs12 -export -in C:\Programs\wildfly-10.1.0.Final\domain-host1\configuration\dshsapoly3uat01.cer -out C:\Programs\wildfly-10.1.0.Final\domain-host1\configuration\dshsapoly3uat01.p12
-------------------------------install cert to jvm keystore (cacerts)-------------------------------------------
"C:\Programs\jdk1.8.0_121\bin\keytool" -importcert -file C:\Admin\certs\ldaps\WACA01.cer -alias WACA01 -keystore "C:\Programs\jdk1.8.0_121\lib\security\cacerts" -storepass changeit
"C:\Programs\jdk1.8.0_121\bin\keytool" -importcert -file C:\Admin\certs\ldaps\WACA02.cer -alias WACA02 -keystore "C:\Programs\jdk1.8.0_121\lib\security\cacerts" -storepass changeit
"C:\Programs\jdk1.8.0_121\bin\keytool" -v -list -keystore "C:\Programs\jdk1.8.0_121\lib\security\cacerts" > C:\Admin\certs\ldaps\WACA.txt
"C:\Programs\jdk1.8.0_121\bin\keytool" -importcert -file "C:\Programs\certs\DigiCert Global Root CA.cer" -alias "digicertglobalrootca [jdk]" -keystore "C:\Programs\jdk1.8.0_121\lib\security\cacerts" -storepass changeit
"C:\Programs\jdk1.8.0_121\bin\keytool" -importcert -file "C:\Programs\certs\api_ca_dshs_wa_gov.crt" -alias "api_ca_dshs_wa_gov" -keystore "C:\Programs\jdk1.8.0_121\lib\security\cacerts" -storepass changeit
"C:\Programs\jdk1.8.0_121\bin\keytool" -importcert -file "C:\Programs\certs\DigiCertCA.crt" -alias "DigiCertCA" -keystore "C:\Programs\jdk1.8.0_121\lib\security\cacerts" -storepass changeit
"C:\Programs\jdk1.8.0_121\bin\keytool" -delete -noprompt -trustcacerts -alias "digicertglobalrootca [jdk]" -keystore "C:\Programs\jdk1.8.0_121\lib\security\cacerts"
----------------------------------------------------------------------------------------------------
openssl req -new -nodes -newkey rsa:2048 -config C:\Admin\OpenSSL\bin\openssl.cnf -reqexts req_ext -keyout C:\Admin\certopenssl\famlink.key -out C:\Admin\certopenssl\famlink.csr
