A Java KeyStore (JKS) is a
repository
Repository may refer to:
Archives and online databases
* Content repository, a database with an associated set of data management tools, allowing application-independent access to the content
* Disciplinary repository (or subject repository), an ...
of security certificates either
authorization certificates or
public key certificate
In cryptography, a public key certificate, also known as a digital certificate or identity certificate, is an electronic document used to prove the validity of a public key. The certificate includes information about the key, information about the ...
s plus corresponding
private keys, used for instance in
TLS encryption.
In
IBM WebSphere Application Server
WebSphere Application Server (WAS) is a software product that performs the role of a web application server. More specifically, it is a software framework and middleware that hosts Java-based web applications. It is the flagship product with ...
and
Oracle WebLogic Server
Oracle WebLogic Server is a Java EE application server currently developed by Oracle Corporation. Oracle acquired WebLogic Server when it purchased BEA Systems in 2008.
Application Server versions
* WebLogic Server 14c (14.1.1) - March 30, 20 ...
, a file with extension ''jks'' serves as a keystore.
The
Java Development Kit
The Java Development Kit (JDK) is a distribution of Java Technology by Oracle Corporation. It implements the Java Language Specification (JLS) and the Java Virtual Machine Specification (JVMS) and provides the Standard Edition (SE) of the Java ...
maintains a
CA keystore file named ''cacerts'' in folder ''jre/lib/security''. JDKs provide a tool named ''keytool'' to manipulate the keystore. ''keytool'' has no functionality to extract the private key out of the keystore, but this is possible with third-party tools like jksExportKey, CERTivity, Portecle and KeyStore Explorer.
KeyStore Explorer - An open source GUI replacement for the Java command-line utilities keytool, jarsigner and jadtool.
/ref>
See also
*Java Secure Socket Extension
In computing, the Java Secure Socket Extension (JSSE) is a Java API and a provider implementation named SunJSSE that enable secure Internet communications in the Java Runtime Environment. It implements a Java technology version of the Secure Socket ...
*Keyring (cryptography) In cryptography, a keyring stores known encryption keys (and, in some cases, passwords). For example, GNU Privacy Guard
GNU Privacy Guard (GnuPG or GPG) is a free-software replacement for Symantec's PGP cryptographic software suite. The software ...
*Public key infrastructure
A public key infrastructure (PKI) is a set of roles, policies, hardware, software and procedures needed to create, manage, distribute, use, store and revoke digital certificates and manage public-key encryption. The purpose of a PKI is to facilit ...
References
External links
Javadoc for KeyStore
Public-key cryptography
Java development tools
{{Computer-security-stub