java keytool
http://www.kafeitu.me/sso/2010/11/05/sso-cas-full-course.html
1.
keytool -genkey -alias wsria -keyalg RSA -keystore /Users/mac/documents/wsriakey
2 .
keytool -export -file /Users/mac/documents/wsria.crt -alias wsria -keystore /Users/mac/documents/wsriakey
3.
如果出现
keytool error: java.io.IOException: Keystore was tampered with, or password was incorrect
那么**库口令输入 changeit 即可
请输入密码：changeit
4.为客户端的JVM导入证书
keytool -import -keystore /Library/Java/JavaVirtualMachines/jdk1.8.0_73.jdk/Contents/Home/jre/lib/security/cacerts -file /Users/mac/documents/wsria.crt -alias wsria