My Oracle Support Banner

Use OpenSSL and Keytool to Generate Demo Trust and Certificate (Doc ID 1333913.1)

Last updated on JANUARY 30, 2022

Applies to:

Oracle WebLogic Server - Version 6.1 and later
Generic Windows


This note gives steps on generating demo trust and certificates, which can be used to replicate an SSL issue.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
 Get OpenSSL ready
 Create Demo CA
 Create server key pair using keytool
 Sign server key request using OpenSSL
 Import Demo CA into new created trust keystore using keytool
 Import Demo CA into new created identity keystore using keytool
 Import OpenSSL signed signing key reply to identity keystore using keytool
 (Optional) Do the same to create Client Key pair for 2-way SSL

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.