Skip to content

Instantly share code, notes, and snippets.

@mcascone

mcascone/addcerts.md

Created October 28, 2022 17:43
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save mcascone/4d86e53a7610943ed2df0981973ad13b to your computer and use it in GitHub Desktop.
Save mcascone/4d86e53a7610943ed2df0981973ad13b to your computer and use it in GitHub Desktop.
Download ZIP
linux certs cheatsheet
Raw
addcerts.md 
keytool -list -keystore /etc/pki/java/cacerts

sudo keytool -list -v -keystore cacerts > /home/engineering/keys.txt

keytool -list -v -keystore cacerts -storepass changeit | grep -i consilio

keytool -list -v -keystore cacerts -alias consilio-cert-issuer -storepass changeit

sudo keytool -keystore cacerts -import -alias consilio-certs-issuer -file /home/engineering/consilio-certs-issuer

cd /etc/pki/java
cd /mnt/data/jenkins
sudo keytool -keystore cacerts -import -alias 2022-godaddy-jenkins -file /root/jenkins-certs/gd_bundle-g2-g1.crt
sudo keytool -keystore cacerts -import -alias 2022-godaddy2 -file /root/jenkins-certs/515c7ebec9aa054a.crt

sudo update-ca-trust

openssl pkcs12 -export -out jenkins.p12 -passout 'pass:your-strong-password' -inkey server.key -in server.crt -certfile rootCA.crt -name jenkins.consilio.com

keytool -importkeystore -srckeystore jenkins.p12 \
-srcstorepass 'changeit' -srcstoretype PKCS12 \
-srcalias jenkins.consilio.com -deststoretype JKS \
-destkeystore jenkins.jks -deststorepass 'changeit' \
-destalias jenkins.consilio.com
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment