1. 生成keystore

• 我这里所有需要输入的密码都是azkaban
• 建议回答的问题是最后的CN，其他可以选择性的填，不填的话直接回车就可以，最后的确认信息回复y是必填的

[hadoop@beh07 conf]$ keytool -genkey -keystore keystore -alias jetty-azkaban -keyalg RSA -validity 3560
Enter keystore password:  
Re-enter new password: 
What is your first and last name?
  [Unknown]:  Jed
What is the name of your organizational unit?
  [Unknown]:  
What is the name of your organization?
  [Unknown]:  
What is the name of your City or Locality?
  [Unknown]:  Beijing
What is the name of your State or Province?
  [Unknown]:  Beijing
What is the two-letter country code for this unit?
  [Unknown]:  CN
Is CN=Jed, OU=Unknown, O=Unknown, L=Beijing, ST=Beijing, C=CN correct?
  [no]:  y

Enter key password for <jetty-azkaban>
    (RETURN if same as keystore password):  
Re-enter new password: 


[hadoop@beh07 conf]$ keytool -export -alias jetty-azkaban -keystore keystore -rfc -file selfsignedcert.cer
Enter keystore password:  
Certificate stored in file <selfsignedcert.cer>

2. 生成truststore

[hadoop@beh07 conf]$ keytool -import -alias certificatekey -file selfsignedcert.cer -keystore truststore
Enter keystore password:  
Re-enter new password: 
Owner: CN=Jed, OU=Unknown, O=Unknown, L=Beijing, ST=Beijing, C=CN
Issuer: CN=Jed, OU=Unknown, O=Unknown, L=Beijing, ST=Beijing, C=CN
Serial number: 2e6a45b4
Valid from: Fri Aug 23 13:59:03 CST 2019 until: Tue May 22 13:59:03 CST 2029
Certificate fingerprints:
     MD5:  60:59:8C:F3:51:78:7D:0F:37:5B:06:5F:9A:DC:B3:D4
     SHA1: F8:16:A3:F0:25:A2:FB:D2:FA:B4:DE:43:5A:3F:B8:4B:40:48:87:32
     SHA256: 0D:07:B4:46:D8:6B:A8:B6:3B:B6:23:92:05:DE:CF:C4:7C:EA:D9:03:ED:3B:F4:B1:43:4B:74:89:5E:35:2F:6A
Signature algorithm name: SHA256withRSA
Subject Public Key Algorithm: 2048-bit RSA key
Version: 3

Extensions: 

#1: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: F2 3D 1F 15 39 31 33 8D   B2 77 B0 2B E7 14 71 D4  .=..913..w.+..q.
0010: 93 17 95 BE                                        ....
]
]

Trust this certificate? [no]:  y
Certificate was added to keystore

最后在你执行命令的目录下会生成3个文件：

keystore
selfsignedcert.cer
truststore