Difference between keytool -genkey vs -genkeypair

keytool csr
Thiru picture Thiru · Feb 14, 2017 · Viewed 10.1k times · Source

I am using keytool to create a csr. I wonder what is the difference between the options -genkey and -genkeypair. My understanding is that -genkey creates only private key and -genkeypair creates both private and public key. If so, how do I get the public key of the private key which is created using -genkey.

Answer

gp_xps picture gp_xps · May 28, 2017

Per https://docs.oracle.com/javase/8/docs/technotes/tools/unix/keytool.html, this keytool flag was named -genkey in earlier releases. While the old name is still supported, -genkeypair is preferred going forward.

So essentially, both are the same

Related questions

Keytool keeps giving SHA256 sigalg instead of requested alg

I am using Keytool in java to generate a keystore/CSR to submit to a certificate Authority. My CA only supports MD5withRSA and SHA1withRSA Everytime I use keytool to create the keystore and export the CSR I am …

Read More
Unable to find valid certification path to requested target - error even after cert imported

I have a Java client trying to access a server with a self-signed certificate. When I try to Post to the server, I get the following error: unable to find valid certification path to requested target Having done some research …

Read More
How do I find out what keystore my JVM is using?

I need to import a certificate into my JVM keystore. I am using the following: keytool -import -alias daldap -file somecert.cer so I would need to probably change my call into something like: keytool -import -alias daldap -file somecert.…

Read More