Keystore

## Generate a keypair
openssl req -x509 -newkey rsa:2048 -sha256 -keyout example.key -out example.crt -subj "/CN=example.com" -days 3650

## Create PFX keystore with this keypair 
openssl pkcs12 -inkey example.key -in example.crt -export -out keystore.pkcs12

## Convert PFX keystore into Java JKS keystore
keytool -importkeystore -srckeystore keys.pkcs12 -srcstoretype pkcs12 -destkeystore keystore.jks

## Other often used
keytool -list -v -keystore keystore.jks -alias mydomain
keytool -delete -alias mydomain -keystore keystore.jks
keytool -import -alias csl -keystore keystore.jks -file csl.crt