Tutorial - Java KeyStores (JKS) With Let's Encrypt

Talk about JKS, keytool and KeyStore Explorer

JKS is tricky as a format as keys can’t exist without certificates. This can be confusing but it’s fairly simple to deal with.

A JKS can also have multiple keys and certificates and these are known as keypairs.

keytool is a java command line utility for working with JKS and is available with the Java Development Kit (JDK) or Java Runtime Environment (JRE). First order of business is to confirm the keytool is available.

A useful reference for keytool:

https://www.sslshopper.com/article-most-common-java-keytool-keystore-commands.html

https://docs.oracle.com/javase/8/docs/technotes/tools/unix/keytool.html

KeyStore Explorer is another tool that is great for working with Key Stores. It can be downloaded here: http://keystore-explorer.org/