Cryptography - Keystore (KS)

A keystore is a database of key material. ie:

• key
• LDAP identity
• Identification Material - Certificate (or Public Key Certificate)

You only need it:

• if you are a server that want to implements SSL,
• or if the server requires client authentication.

A keystore contains:

• key entries (an entity's identity and its private key)
• and trusted certificate entries (only a public key in addition to the entity's identity). Thus, a trusted certificate entry cannot be used where a private key is required, such as in a javax.net.ssl.KeyManager.

Various types of keystores are available, including:

• PKCS12
• Oracle's JKS.
• … more see Cryptography - Storage of key material

For pem, see Privacy-Enhanced Mail (PEM) (OpenSsh key format)

Generation of a keypair with the RSA public key implementation and creation of a key store with keytool

keytool \
    -genkeypair 
    -alias aliasEntry
    -keyalg RSA 
    -keystore keyStoreName.jks 
    -dname "[email protected], CN=KeyName, OU=Programs Partners, O=Organisation, L=Town, C=NL" 
    -storepass keyStorePassword 
    -keysize 2048 
    -keypass keyPassword

where:

• dname is the LDAP - Distinguished Name (DN)

with Cryptography - Keytool (Key and Certificate Management Tool)

keytool -list -keystore serverkeystore.jks

• Add the keystore in the keystores

• Set the key store to your request properties