Self Signed Certificate Regeneration Script on Expiration
Remove the certificate to replace from the keystore and from the truststore.
- keytool -delete -alias admin-cert -keystore admin-keystore -storepass `cat ./admin-keystore.pin`
- keytool -delete -alias admin-cert -keystore admin-truststore -storepass `cat ./admin-keystore.pin`
Generate the private key, storing it in the keystore.
- keytool -genkey -alias admin-cert -keyalg RSA -storetype PKCS12 -dname "CN=localhost.localdomain, O=Administration Connector Self-Signed Certificate" -keystore admin-keystore -storepass `cat ./admin-keystore.pin` -keypass `cat ./admin-keystore.pin`
- keytool -genkey -alias admin-cert -keyalg RSA -storetype JKS -dname "CN=localhost.localdomain, O=Administration Connector Self-Signed Certificate" -keystore admin-keystore -storepass `cat ./admin-keystore.pin` -keypass `cat ./admin-keystore.pin`
Self-sign what you generated
- keytool -selfcert -alias admin-cert -keystore admin-keystore -storepass `cat ./admin-keystore.pin`
Export the certificate from the keystore.
- keytool -export -alias admin-cert -keystore admin-keystore -storepass `cat ./admin-keystore.pin` -file ./admin-cert.crt
Import the certificate into the truststore.
- keytool -import -alias admin-cert -keystore admin-truststore -storepass `cat ./admin-keystore.pin` -file ./admin-cert.crt