wsse.keystore: How to create?

[juergen.zimmermann]

I extended my app with WS-Security and signatures. Using wsse.keystore and wsse.truststore from the JBossWS examples works fine.

However, I don't know how to create my own keystore and truststore. I tried these commands -- without success. Any hint is appreciated!

keytool -genkeypair -alias wsse -keyalg RSA -keysize 2048 -sigalg SHA1withRSA -dname "CN=..." -keypass jbossws -storetype JKS -keystore testKeystore.jks -storepass jbossws -v

keytool -exportcert -file test.cer -alias wsse -storetype JKS -keystore testKeystore.jks -storepass jbossws -v

keytool -importcert -alias wsse -file test.cer -keypass jbossws -noprompt -storetype JKS -keystore testTruststore.jks -storepass jbossws -v

[juergen.zimmermann]

Solved:

-exportcert additionally needs -rfc
-importcert additionally needs -trustcacerts

BTW, the options -genkeypair, -exportcert, -importcert are named according JDK 6.0