przodownik ~/b/s/openSSL (x509|✚7)$ openssl req -new -newkey rsa -nodes -out ca.csr -keyout ca.key
Generating a 2048 bit RSA private key
.........................................+++
......................................+++
writing new private key to 'ca.key'

Country Name (2 letter code) [AU]:PL
State or Province Name (full name) [Some-State]:mazowieckie
Locality Name (eg, city) []:Warsaw
Organization Name (eg, company) [Internet Widgits Pty Ltd]:scalatech
Organizational Unit Name (eg, section) []:scalatech
Common Name (e.g. server FQDN or YOUR name) []:przodownik
Email Address []:przodownikR1@gmail.com

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
przodownik ~/b/s/openSSL (x509|✚7…2)$ ls
ca.csr  ca.key
przodownik ~/b/s/openSSL (x509|✚7…2)$ openssl x509 -trustout -signkey ca.key -days 3650 -req -in ca.csr -out ca.pem
Signature ok
subject=/C=PL/ST=mazowieckie/L=Warsaw/O=scalatech/OU=scalatech/CN=przodownik/emailAddress=przodownikR1@gmail.com
Getting Private key
przodownik ~/b/s/openSSL (x509|✚7…3)$ ls
ca.csr  ca.key  ca.pem
przodownik ~/b/s/openSSL (x509|✚7…3)$


przodownik ~/b/s/openSSL (x509|✚7…3)$ ls
ca.csr  ca.key  ca.pem
przodownik ~/b/s/openSSL (x509|✚7…3)$ openssl x509 -outform der -in ca.pem -out ca.crt
przodownik ~/b/s/openSSL (x509|✚7…4)$ ls
ca.crt  ca.csr  ca.key  ca.pem
przodownik ~/b/s/openSSL (x509|✚7…4)$



keytool -import -keystore trust.jks -trustcacerts -file ca.crt -storepass secret-trust                                                                                 15:05
Owner: EMAILADDRESS=przodownikR1@gmail.com, CN=przodownik, OU=scalatech, O=scalatech, L=Warsaw, ST=mazowieckie, C=PL
Issuer: EMAILADDRESS=przodownikR1@gmail.com, CN=przodownik, OU=scalatech, O=scalatech, L=Warsaw, ST=mazowieckie, C=PL
Serial number: ed056d7a97490de5
Valid from: Fri Dec 04 14:34:38 CET 2015 until: Mon Dec 01 14:34:38 CET 2025
Certificate fingerprints:
	 MD5:  34:01:C0:B2:FB:E1:C5:A7:96:1F:81:78:9E:F9:1D:3F
	 SHA1: 45:EA:3E:52:57:04:95:DB:B3:60:61:FF:48:BE:EF:89:1D:6A:14:BD
	 SHA256: E8:F4:E9:72:75:74:1D:B9:C7:EA:1B:19:26:AD:A4:B6:73:D5:8E:FD:E2:9E:52:B7:A7:B4:AE:5D:12:52:62:FD
	 Signature algorithm name: SHA256withRSA
	 Version: 1
Trust this certificate? [no]:  yes
Certificate was added to keystore