02.SSL - HTTPS, SSL Command.

-

 SSL - HTTPS, SSL Command.



REF: 

https://docs.oracle.com/cd/E19830-01/819-4712/ablqw/index.html#:~:text=jks%2C%20contains%20the%20Application%20Server%27s%20trusted%20certificates%2C%20including%20public%20keys,of%20certification%20authorities%20(CAs).

https://www.thomasvitale.com/https-spring-boot-ssl-certificate/

https://www.educba.com/spring-boot-https/


keystore of type JKS using an RSA key algorithm. RSA is public-key encryption technology developed by RSA Data Security, Inc

keytool -genkey -noprompt -trustcacerts -keyalg RSA -alias ${cert.alias} -dname  ${dn.name} -keypass ${key.pass} -keystore ${keystore.file} -storepass ${keystore.pass}

Create a self-signed certificate in a keystore of type JKS using the default key algorithm.

keytool -genkey -noprompt -trustcacerts -alias ${cert.alias} -dname ${dn.name} -keypass ${key.pass} -keystore ${keystore.file} -storepass ${keystore.pass}

Example:

keytool -genkey -alias keyAlias -keyalg RSA -keypass changeit -storepass changeit -keystore keystore.jks

keytool -genkeypair -alias main-app-keystore-one -keyalg RSA -keysize 2048 -storetype PKCS12 -keystore main-app-keystore-one.p12 -storepass 123456789 -keypass 123456 -validity 365 -ext san=dns:localhost


Display available certificates from a keystore of type JKS

keytool -list -v  -keystore ${keystore.file} -storepass ${keystore.pass}

Example:

keytool -list -v  -keystore main-app-keystore-one.p12 -storepass 123456789


Display certificate information from a keystore of type JKS.

keytool  -list -v  -alias ${cert.alias} -keystore ${keystore.file} -storepass ${keystore.pass}

Example:

keytool  -list -v  -alias main-app-keystore-one -keystore main-app-keystore-one.p12 -storepass 123456789

Import an RFC/text-formatted certificate into a JKS store. 

Certificates are often stored using the printable encoding format defined by the Internet RFC (Request for Comments) 1421 standard instead of their binary encoding. This certificate format, also known as Base 64 encoding, facilitates exporting certificates to other applications by email or through some other mechanism.

keytool -import -noprompt -trustcacerts -alias ${cert.alias} -file ${cert.file} -keystore ${keystore.file} -storepass ${keystore.pass}

Example:

keytool -import -v -trustcacerts -alias main-app-keystore-one -file main-app-keystore-one.crt -keystore main-app-keystore-one.jks -storepass 123456789

keytool -import -noprompt -trustcacerts -alias main-app-keystore-one -file "E:\My\MyProject\SSL\lahiru.crt" -keystore "C:\Program Files\Amazon Corretto\jdk11.0.13_8\lib\security" 

keytool -import -noprompt -trustcacerts -alias sub-app-keystore-one -file "E:\My\MyProject\SSL\sub-app-keystore-one.crt" -keystore "C:\Program Files\Amazon Corretto\jdk11.0.13_8\lib\security" -storepass 123456789


Will Display

Certificate was added to keystore

[Saving cacerts.jks]


Export a certificate from a keystore of type JKS in PKCS7 format

keytool -export -noprompt  -alias ${cert.alias} -file ${cert.file} -keystore ${keystore.file} -storepass ${keystore.pass}

Export a certificate from a keystore of type JKS in RFC/text format

keytool -export -noprompt -rfc  -alias ${cert.alias} -file ${cert.file} -keystore ${keystore.file} -storepass ${keystore.pass}

Example:

keytool -export -keystore keystore-p12-2.p12 -alias server-alias-pk12-two -file keystore-p12-2.crt

keytool -export -alias main-app-keystore-one -storepass 123456789 -file main-app-keystore-one.crt -keystore main-app-keystore-one.p12 -storetype pkcs12


Delete a certificate from a keystore of type JKS.

keytool -delete -noprompt -alias ${cert.alias}  -keystore ${keystore.file} -storepass ${keystore.pass}

Example:

keytool -delete -alias keyAlias -keystore keystore-name -storepass password

keytool -delete -noprompt -alias main-app-keystore-one  -keystore main-app-keystore-one.p12 -storepass 123456789



Comments

Post a Comment

Popular posts from this blog

02. Spring – Creating spring project clone it with GIT step by step.

-
Image
  Creating spring project clone it with GIT step by step. 01. Create an empty GIT repository and select a repository name. 02.   Check to add README.md and technology to add it inside the gitignire file0- it will include all the generated class when we complete the application. 03.      Copy the github repository URL. 04 . Open eclipse and go to,             Window – Show View – Other - Type git on the folder and select git repositories. 05.   Now clone this repository at your desired location in which we are going to keep the project specific file . a)         a)  Step One.             b)  Step  Two .          c)    Step Three. Both projects are generated as bellows           d) Step Four  Open the gitingnore file and ignore the target folder of the project. All the class files which are generate with compile the code are store in target folder. Class file can be generated. Because of that we don’t commit that folder to git.           e) Step Five Open window – preference – filter fo
Read more

02.What is MicroService?

-
Image
What is MicroService? MicroService යනු තනි application එකක් (Monolithic Application එකක්), එකිනෙක communicate කරගන පුළුවන් වෙන වෙනම deploy වන කුඩා කුඩා independent services වලට කැඩීමයි. Simply it is new way to develop application rather than traditional monolithic application. Companies which are using microservice.   Features of MicroService Architecture Small focused – main aim of microservice is simplicity.it can be rewrite in maintained without extra effort. Loosely coupled – development as well as deployment is quick. Language Neutral – few services can be Java, few is c# few can be python.it can be use depend on the service. Bounded Context – each microservice does not need to understand the implementation of the other microservice.
Read more

06.Mongo DB - Query part 2 (Aggregation)

-
Image
    Project can be download from         https://github.com/LahiruPriyankara/SpringBootAppTwo-MongoDB MongoDB Aggregation This groups values from multiple documents together and can perform variety of operations on that grouped data.it is going to return single result after the aggregation. Stages In Aggregation: Those operation are used in group of documents ( Used inside aggregation stages).  Unary Operation -  Unary operator perform operation for each documents. Type - Given the type of the filed. In the SQL we query select count and in the bracket Astrix this count for aggregation. It return the number of rows. This is same in mongoDB. db . employee . aggregate ([ { $group : { _id : "$gender" , genderCount : { $sum : 1 } } } ]) // $sum: 1 :1 - true db . employee . aggregate ([ { $group : { _id : "$gender" , maxAge : { $max : "$age" } } } ]) Bellow example is from  https://docs.mongodb.com/manual/aggregation/ Single Purpose Aggregation
Read more