This tutorial shows how to create a key store containing a private key and a certificate suitable for the SAML configuration.
There are many freely available tools. The following examples for the Java keytool (a command-line tool that is part of the Java JRE or JDK) and Keystore Explorer (a free graphical tool) are given.
Using Java keytool
Generate new key store airlock-iam-idp.jks:
copy
keytool -genkeypair -keyalg RSA -keysize 2048 -keystore ./airlock-iam-idp.jks -alias "airlock-iam-idp"
Extract the public key to airlock-iam-idp-public.pem:
copy
keytool -exportcert -rfc -keystore ./airlock-iam-idp.jks -alias "airlock-iam-idp" -file airlock-iam-idp-public.pem
Using Keystore Explorer
The tool is available here: http://keystore-explorer.org/
Create a new key store:
- ●File/New (and follow instructions)
- ●Generate and add new key pair to key store:
- ●Tools/Generate Key Pair (and follow instructions to create an RSA key)
Get the public key:
- ●Double click on the key (info window will open)
- ●Click the button "PEM" (opens a window containing the public key)