Software View

You are into Java security. In one command execution (with no questions asked), if you want to

1. Generate four jks keystores (CA, service, client1, client2) and possibly more
2. Self sign CA certificate with proper certificate extensions
3. CA certify service, client1, client2 certificates with proper certificate extensions (AKI, SKI)
4. Add service certificate to client1, client2 keystores
5. Optionally, add client1 and client2 certificates to service

Download jkscertgen

And execute like this

1. Create a new directory, copy the shell script to it
2. Make sure the script is executable (one time)
   $ chmod +x jkscertgen.sh
3. Run the script
   $ ./jkscertgen.sh

The script can help you learn the steps required to follow to do the above as well. You are free to modify or distribute this work. Look at the script itself for directions.