A Java KeyStore (JKS) is a
repository
Repository may refer to:
Archives and online databases
* Content repository, a database with an associated set of data management tools, allowing application-independent access to the content
* Disciplinary repository (or subject repository), a ...
of security certificates either
authorization certificate In computer security, an attribute certificate, or authorization certificate (AC) is a digital document containing attributes associated to the holder by the issuer. When the associated attributes are mainly used for the purpose of authorization, ...
s or
public key certificate
In cryptography, a public key certificate, also known as a digital certificate or identity certificate, is an electronic document used to prove the validity of a public key. The certificate includes information about the key, information about the ...
s plus corresponding
private keys, used for instance in
TLS encryption.
In
IBM WebSphere Application Server
WebSphere Application Server (WAS) is a software product that performs the role of a web application server. More specifically, it is a software framework and middleware that hosts Java (software platform), Java-based web applications. It is t ...
and
Oracle WebLogic Server
Oracle WebLogic Server is a Java EE application server currently developed by Oracle Corporation. Oracle acquired WebLogic Server when it purchased BEA Systems in 2008.
Application Server versions
* WebLogic Server 14c (14.1.1) - March 30, 20 ...
, a file with extension ''jks'' serves as a keystore.
The
Java Development Kit
The Java Development Kit (JDK) is a distribution of Java Technology by Oracle Corporation. It implements the Java Language Specification (JLS) and the Java Virtual Machine Specification (JVMS) and provides the Standard Edition (SE) of the Java ...
maintains a
CA keystore file named ''cacerts'' in folder ''jre/lib/security''. JDKs provide a tool named ''keytool'' to manipulate the keystore. ''keytool'' has no functionality to extract the private key out of the keystore, but this is possible with third-party tools like jksExportKey, CERTivity, Portecle and KeyStore Explorer.
KeyStore Explorer - An open source GUI replacement for the Java command-line utilities keytool, jarsigner and jadtool.
/ref>
See also
*Java Secure Socket Extension
In computing, the Java Secure Socket Extension (JSSE) is a Java API and a provider implementation named SunJSSE that enable secure Internet communications in the Java Runtime Environment. It implements a Java technology version of the Secure Socket ...
*Keyring (cryptography) In cryptography, a keyring stores known encryption keys (and, in some cases, passwords). For example, GNU Privacy Guard makes use of keyrings.
See also
* Java KeyStore A Java KeyStore (JKS) is a repository of security certificates either author ...
*Public key infrastructure
A public key infrastructure (PKI) is a set of roles, policies, hardware, software and procedures needed to create, manage, distribute, use, store and revoke digital certificates and manage public-key encryption. The purpose of a PKI is to facil ...
References
External links
Javadoc for KeyStore
Public-key cryptography
Java development tools
{{Computer-security-stub