keytool

Generate keystore

# Create keystore
keytool \
  -genkeypair \
  -keystore "keystore.jks" \
  -alias "MyTestAlias" \
  -keyalg "RSA" \
  -keysize "2048" \
  -dname "CN=mycompany.com,C=GB" \
  -storepass "mypass1234" \
  -keypass "mypass1234"

# List keystore
keytool \
  -list -v \
  -keystore "keystore.jks"

Request signature (csr)

keytool \
  -certreq -v \
  -keystore "keystore.jks" \
  -alias "MyTestAlias" \
  -file "mycsr.csr"

Import certificate to keystore

# Import crt to any keystore
keytool \
  -importcert \
  -keystore "keystore.jks" \
  -file "mycert.pem" \
  -alias "mytestalias"

# Add crt to default java keystore
keytool \
  -importcert \
  -trustcacerts \
  -noprompt \
  -keystore "$JAVA_HOME/jre/lib/security/cacerts" \
  -storepass "changeit" \
  -file "~/cacorp.crt" \
  -alias "cacorp"

FROM openjdk:11-jdk-slim
USER root
WORKDIR $JAVA_HOME/jre/lib/security
COPY cacorp.crt ./
RUN keytool -importcert -noprompt -trustcacerts -keystore cacerts -storepass changeit -file cacorp.crt -alias cacorp