am 4273ce19: Merge "Doc change: Suggest min keysize of 2048 for keys." into froyo

<td><code>-v</code></td><td>Enable verbose output.</td>

<td><code>-v</code></td><td>Enable verbose output.</td>

</tr>

</tr>

<tr>

<tr>

<td><code>-keystore&nbsp;&lt;keystore-name&gt;.keystore</code></td><td>A name

for the keystore containing the private key.</td>

</tr>

<tr>

<td><code>-storepass &lt;password&gt;</code></td><td><p>A password for the

keystore.</p><p>As a security precaution, do not include this option 

in your command line unless you are working at a secure computer.

If not supplied, Keytool prompts you to enter the password. In this 

way, your password is not stored in your shell history.</p></td>

</tr>

<tr>

<td><code>-alias &lt;alias_name&gt;</code></td><td>An alias for the key. Only

<td><code>-alias &lt;alias_name&gt;</code></td><td>An alias for the key. Only

the first 8 characters of the alias are used.</td>

the first 8 characters of the alias are used.</td>

</tr>

</tr>

when generating the key. Both DSA and RSA are supported.</td>

when generating the key. Both DSA and RSA are supported.</td>

</tr>

</tr>

<tr>

<tr>

<td><code>-keysize &lt;size&gt;</code></td><td>The size of each generated key

(bits). If not supplied, Keytool uses a default key size of 1024 bits. In

general, we recommend using a key size of 2048 bits or higher. </td>

</tr>

<tr>

<td><code>-dname &lt;name&gt;</code></td><td><p>A Distinguished Name that describes

<td><code>-dname &lt;name&gt;</code></td><td><p>A Distinguished Name that describes

who created the key. The value is used as the issuer and subject fields in the

who created the key. The value is used as the issuer and subject fields in the

self-signed certificate. </p><p>Note that you do not need to specify this option

self-signed certificate. </p><p>Note that you do not need to specify this option

of the Distinguished Name fields (CN, OU, and so on).</p></td>

of the Distinguished Name fields (CN, OU, and so on).</p></td>

</tr>

</tr>

<tr>

<tr>

<td><code>-keypass &lt;password&gt;</code></td><td><p>The password for the

key.</p> <p>As a security precaution, do not include this option in your command

line. If not supplied, Keytool prompts you to enter the password. In this way,

your password is not stored in your shell history.</p></td>

</tr>

<tr>

<td><code>-validity &lt;valdays&gt;</code></td><td><p>The validity period for the

<td><code>-validity &lt;valdays&gt;</code></td><td><p>The validity period for the

key, in days. </p><p><strong>Note:</strong> A value of 10000 or greater is recommended.</p></td>

key, in days. </p><p><strong>Note:</strong> A value of 10000 or greater is recommended.</p></td>

</tr>

</tr>

<tr>

<tr>

<td><code>-keypass &lt;password&gt;</code></td><td><p>The password for the key.</p>

<td><code>-keystore&nbsp;&lt;keystore-name&gt;.keystore</code></td><td>A name

<p>As a security precaution, do not include this option 

for the keystore containing the private key.</td>

in your command line unless you are working at a secure computer.

</tr>

If not supplied, Keytool prompts you to enter the password. In this 

<tr>

way, your password is not stored in your shell history.</p></td>

<td><code>-storepass &lt;password&gt;</code></td><td><p>A password for the

keystore.</p><p>As a security precaution, do not include this option in your

command line. If not supplied, Keytool prompts you to enter the password. In

this way, your password is not stored in your shell history.</p></td>

</tr>

</tr>

</table>

</table>

<p>Here's an example of a Keytool command that generates a private key:</p>

<p>Here's an example of a Keytool command that generates a private key:</p>

<pre>$ keytool -genkey -v -keystore my-release-key.keystore 

<pre>$ keytool -genkey -v -keystore my-release-key.keystore 

-alias alias_name -keyalg RSA -validity 10000</pre>

-alias alias_name -keyalg RSA -keysize 2048 -validity 10000</pre>

<p>Running the example command above, Keytool prompts you to provide

<p>Running the example command above, Keytool prompts you to provide

passwords for the keystore and key, and to provide the Distinguished

passwords for the keystore and key, and to provide the Distinguished