Generate a self-signed certificate - KeyTool

Generate a self-signed certificate - KeyTool

First generate a key pair (public / private) for our organization. This key pair is stored in a self-signed certificate.

This operation is our key store will also create ( from now on we will refer to the certificate store as " keystore" ) if it was not set up yet. The default keystore is created in the " home" of the user name. " Keystore" directory. This keystore is where the self-signed certificate with the key pair (public / private ) will be saved.

$ Keytool- genkey -alias - keypass autentiaCert claveDeAutentiaCert -validity 365 - storepass claveDeKeyStore

• -alias : the name by which we refer to key pair created .

• - keypass : is the key with which we can access the private key of the key pair created .

• -validity : the validity period, in days. In our example, one year.

• - storepass : key to access your keystore .


During the process we will ask for the name and surname (if we are generating a certificate to implement SSL on a Web server on the Internet, we should put the DNS name if the server is in intranet should put the name of the machine), the name of the OU, the organization name, the name of the city, the name of the province, and the two- letter country.