...
| Code Block | ||
|---|---|---|
| ||
keytool -genkey -keyalg RSA -alias workbench -keystore <path-to-keystore>
-storepass <store-password> -storetype PKCS12 -keysize 2048
-sigalg SHA256withRSA -dname "CN=<host url>"
-ext san=dns:engine.yourdomain.com
-validity <days-valid> |
Please replace the <placeholder-values> in this command based on the following descriptions:
Placeholder | Description | Example Value |
|---|---|---|
path-to-keystore | Full qualified path of the key store to be created |
|
store-password | Password required when reading or writing to the newly created key store | Choose a random password string. Note that the key stores supplied with Java have a default password of |
host-url | The domain name of the URL that will be used to access Workbench in your browser. This does not include the protocol or port numbers. For example, |
(no port number) |
days-valid | The number of days for which the key should remain valid | Note that the key stores supplied with Java have a default validity of 180 days. |
For example, this command creates a keystore called workbench.p12 in the MettleCI home directory for use with workbench currently accessed at URL http://my-engine.datamigrators.com:8080:
| Expand | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| |||||||||
You can verify your keystore by listing the certificates within it. You’ll need to re-enter your keystore password, which is 'changeit' (no quotes) in our example.
If you need to export your certificate for signing you can use a command like the following:
|
| Expand | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||
Ensure that your keystore has at least 644 ( Ensure that your keystore is owned by You can verify your keystore by listing the certificates within it. You’ll need to re-enter your keystore password, which is 'changeit' (no quotes) in our example above.
If you need to export your certificate for signing you can use a command like the following:
|
...