Keystore File Creation

This section describes how to create the server.keystore and client.keystore keystore files for secure web service configuration, as used in examples Modeling Secure Web Services and Client Side Configuration:

• Generate the server keystore in file server.keystore:

  %JAVA_HOME%/bin/keytool -genkey -alias curam-sv -dname "CN=localhost, OU=Dev, O=Curam, L=Dublin, ST=Ireland, C=IRL" -keyalg RSA -keypass password -storepass password -keystore server.keystore

• Export the certificate from the keystore to an external file server.cer:

  %JAVA_HOME%/bin/keytool -export -alias curam-sv -storepass password -file server.cer -keystore server.keystore

• Generate the client keystore in file client.keystore:

  %JAVA_HOME%/bin/keytool -genkey -alias beantester -dname "CN=Client, OU=Dev, O=Curam, L=Dublin, ST=Ireland, C=IRL" -keyalg RSA -keypass password -storepass password -keystore client.keystore

• Export the certificate from the client keystore to external file client.cer:

  %JAVA_HOME%/bin/keytool -export -alias beantester -storepass password -file client.cer -keystore client.keystore

• Import server's certificate into the client's keystore:

  %JAVA_HOME%/bin/keytool -import -v -trustcacerts -alias curam -file server.cer -keystore client.keystore -keypass password -storepass password

• Import client's certificate into the server's keystore:

  %JAVA_HOME%/bin/keytool -import -v -trustcacerts -alias curam -file client.cer -keystore server.keystore -keypass password -storepass password