test/jdk/javax/net/ssl/etc/README

*** 78,92 ****
  % keytool -genkeypair -alias dummydsa -keyalg DSA -keysize 1024 \
    -sigalg SHA256withDSA \
    -dname "CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US" \
    -validity 3652 -keypass passphrase -keystore keystore -storepass passphrase
  
  
  truststore entries
  ==================
  This key store contains only trusted certificate entries.  The same
! certificates are used in both keystore and truststore.
  
  
  unknown_keystore
  ================
  A keystore you can use when you don't want things to be verified.
--- 78,115 ----
  % keytool -genkeypair -alias dummydsa -keyalg DSA -keysize 1024 \
    -sigalg SHA256withDSA \
    -dname "CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US" \
    -validity 3652 -keypass passphrase -keystore keystore -storepass passphrase
  
+ Alias name: dummyecrsa
+ --------------------
+ Creation date: Apr 13, 2018
+ Entry type: PrivateKeyEntry
+ Certificate chain length: 2
+ Certificate[1]:
+ Owner: CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US
+ Issuer: CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US
+ Serial number: 6f2d1faa
+ Valid from: Fri Apr 13 16:20:55 CST 2018 until: Wed Apr 12 16:20:55 CST 2028
+ Version: 3
+ 
+ This can be generated by using keytool command:
+ % keytool -genkeypair -alias dummyecrsa -keyalg EC -keysize 256 \
+   -keypass passphrase -storepass passphrase -keystore keystore \
+   -dname "CN=dummy.example.com, OU=Dummy, O=Dummy, L=Cupertino, ST=CA, C=US"
+ % keytool -certreq -alias dummyecrsa -storepass passphrase -keystore keystore \
+   -file ecrsa.csr
+ % keytool -gencert -alias dummy -storepass passphrase -keystore keystore \
+   -validity 3652 -infile ecrsa.csr -outfile ecrsa.cer
+ % keytool -importcert -alias dummyecrsa -storepass passphrase -keystore keystore \
+   -file ecrsa.cer
+ 
  
  truststore entries
  ==================
  This key store contains only trusted certificate entries. The same
! certificates, except dummyecrsa, are used in both keystore and truststore.
  
  
  unknown_keystore
  ================
  A keystore you can use when you don't want things to be verified.