What is the primary purpose of a Java keystore?

What is the primary purpose of a Java keystore?

• A. Keystore stores public certificates plus corresponding private keys
• B. Keystore stores public certificates only
• C. Keystore stores private keys only
• D. Keystore stores configuration data

Answer: (A)

Java keystore is a secure repository for managing cryptographic material used in authentication and encryption. Its primary role is to store private keys together with the public certificates that prove their identity, including the certificate chain up to trusted roots. This pairing lets you perform operations like TLS/SSL handshakes, code signing, and secure client/server authentication, because the private key stays with you while the certificate allows others to verify ownership. While you can also store certificates on their own in a keystore for trust purposes, the most complete description is that a keystore holds public certificates plus their corresponding private keys. Storing only private keys would lack the public identity proof, and storing only configuration data is outside the keystore’s purpose.

Java keystore is a secure repository for managing cryptographic material used in authentication and encryption. Its primary role is to store private keys together with the public certificates that prove their identity, including the certificate chain up to trusted roots. This pairing lets you perform operations like TLS/SSL handshakes, code signing, and secure client/server authentication, because the private key stays with you while the certificate allows others to verify ownership. While you can also store certificates on their own in a keystore for trust purposes, the most complete description is that a keystore holds public certificates plus their corresponding private keys. Storing only private keys would lack the public identity proof, and storing only configuration data is outside the keystore’s purpose.