A Java KeyStore (JKS) is a
repository
Repository may refer to:
Archives and online databases
* Content repository, a database with an associated set of data management tools, allowing application-independent access to the content
* Disciplinary repository (or subject repository), an ...
of security certificates either
authorization certificate In computer security, an attribute certificate, or authorization certificate (AC) is a digital document containing attributes associated to the holder by the issuer. When the associated attributes are mainly used for the purpose of authorization, A ...
s or
public key certificate
In cryptography, a public key certificate, also known as a digital certificate or identity certificate, is an electronic document used to prove the validity of a public key. The certificate includes information about the key, information about the ...
s plus corresponding
private keys, used for instance in
TLS encryption.
In
IBM WebSphere Application Server and
Oracle WebLogic Server
Oracle WebLogic Server is a Java EE application server currently developed by Oracle Corporation. Oracle acquired WebLogic Server when it purchased BEA Systems in 2008.
Application Server versions
* WebLogic Server 14c (14.1.1) - March 30, 20 ...
, a file with extension ''jks'' serves as a keystore.
The
Java Development Kit maintains a
CA keystore file named ''cacerts'' in folder ''jre/lib/security''. JDKs provide a tool named ''keytool'' to manipulate the keystore. ''keytool'' has no functionality to extract the private key out of the keystore, but this is possible with third-party tools like jksExportKey, CERTivity, Portecle and KeyStore Explorer.
KeyStore Explorer - An open source GUI replacement for the Java command-line utilities keytool, jarsigner and jadtool.
/ref>
See also
*Java Secure Socket Extension
In computing, the Java Secure Socket Extension (JSSE) is a Java API and a provider implementation named SunJSSE that enable secure Internet communications in the Java Runtime Environment. It implements a Java technology version of the Secure Socket ...
*Keyring (cryptography) In cryptography, a keyring stores known encryption keys (and, in some cases, passwords). For example, GNU Privacy Guard
GNU Privacy Guard (GnuPG or GPG) is a free-software replacement for Symantec's PGP cryptographic software suite. The software ...
*Public key infrastructure
A public key infrastructure (PKI) is a set of roles, policies, hardware, software and procedures needed to create, manage, distribute, use, store and revoke digital certificates and manage public-key encryption. The purpose of a PKI is to facilit ...
References
External links
Javadoc for KeyStore
Public-key cryptography
Java development tools
{{Computer-security-stub