- How To Create a Self-Signed SSL Certificate for Nginx in Ubuntu 16.04
- self-signed-certificate-with-custom-ca.md
- OpenSSL Essentials: Working with SSL Certificates, Private Keys and CSRs
- Do web browsers cache SSL certificates?
Command to import the Root certificate:
keytool -import -v -trustcacerts \
-alias gce-alias -file gce.cer \
-keystore cacerts.jks -keypass changeit \
-storepass changeit
Command to get the certificate from a HTTPS site:
openssl s_client -connect www.baidu.com:443 </dev/null 2>/dev/null | openssl x509 -outform DER > baidu.cer