keytool 生成證書

官方文檔： https://docs.oracle.com/javase/8/docs/technotes/tools/windows/keytool.html

des:

keytool -genseckey -alias "des_code" -keyalg DES -validity 1000 -keystore 
D:\github-myproject\encryption\src\main\resources\des_code.keystore 
-keysize 56 -storetype jceks
           

3des:

keytool -genseckey -alias "desede_code" -keyalg DESede -validity 1000 -keystore 
D:\github-myproject\encryption\src\main\resources\desede_code.keystore 
-keysize 168 -storetype jceks
           

aes:

keytool -genkeypair -alias "aes_code" -keyalg AES -validity 1000 -keystore 
D:\github-myproject\encryption\src\main\resources\aes_code.keystore -keysize 
128 -storetype jceks
           

rsa:

keytool -genkeypair -alias "rsa_code"  -keypass 123456 -keyalg RSA -validity 1000 
-keystore D:\github-myproject\encryption\src\main\resources\rsa_code.keystore 
-storepass 123456 -keysize 2048 -storetype jks
           

-keypass:

• Key password

-storepass:

• Keystore password

-keyalg：

• -genseckey 适用對稱加密。隻有一個密鑰。
• -genkeypair 适用非對稱加密 。包括私鑰和公鑰。

-keysize：

• 2048 (when using -genkeypair and -keyalg is “RSA”)
• 1024 (when using -genkeypair and -keyalg is “DSA”)
• 256 (when using -genkeypair and -keyalg is “EC”)
• 56 (when using -genseckey and -keyalg is “DES”)
• 168 (when using -genseckey and -keyalg is “DESede”)
• 128 (when using -genseckey and -keyalg is “AES”)

keyStore type：

• jks
  • 預設類型，隻支援非對稱加密 RSA EC
  • only supports asymmetric (public/private) keys
• jceks
  • 支援對稱加密 DES 3DES AES