# JSSE_SSL_DEMO

**Repository Path**: xundh/JSSE_SSL_DEMO

## Basic Information

- **Project Name**: JSSE_SSL_DEMO
- **Description**: Java 实现SSL Socket通讯的示例
- **Primary Language**: Java
- **License**: GPL-3.0
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 1
- **Created**: 2020-07-31
- **Last Updated**: 2023-11-09

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# JSSE_SSL_DEMO
---------------

## 生成证书步骤，使用keytool


### 1，创建服务端keystore
```bash
keytool -genkey -keystore server.jks -storepass 1234storepass -keypass 1234keypass -keyalg RSA  -validity 3650 -storetype JKS
# 查看
# keytool -list -v -keystore server.jks
```

### 2，创建客户端keystore
```bash
keytool -genkey -keystore client.jks -storepass 1234storepass -keypass 1234keypass -keyalg RSA  -validity 3650 -storetype JKS
```

### 3，导出服务端证书(server.cer 里面只有公钥)
```bash
keytool -export -keystore server.jks -storepass 1234storepass -file server.cer
# 查看
# keytool -printcert -file server.cer
```

### 4，导出客户端证书
```bash
keytool -export -keystore client.jks -storepass 1234storepass -file client.cer
```

### 5，将服务端证书导入到客户端`trustkeystroe`
```bash
keytool -import -keystore clientTrust.jks -storepass 1234storepass -file server.cer -storetype JKS
```

### 6，将客户端证书导入到服务端trustkeystroe
```bash
keytool -import -keystore serverTrust.jks -storepass 1234storepass -file client.cer -storetype JKS
```