[[command]]
name = "keytool"
description = "Manages Java keystores and X.509 certificates. Keytool has both read-only and mutating subcommands: -list and -printcert inspect keystore contents and certificate files without modification, while subcommands like -genkeypair, -importcert, -delete, and -changealias create or modify keys and certificates in the keystore. Some operations (-printcert -jarfile) read JAR files. No network access in normal operation, though -importcert can fetch from URLs. Part of the JDK (6-month release cadence); keytool's subcommand surface is stable, with the last notable change being the default keystore format switching from JKS to PKCS12 in JDK 9."
url = "https://docs.oracle.com/en/java/javase/21/docs/specs/man/keytool.html"
bare_flags = ["--help", "--version", "-V", "-h"]

[[command.sub]]
name = "-list"
standalone = ["--help", "-h", "-rfc", "-v"]
valued = ["-alias", "-keystore", "-storepass", "-storetype"]
max_positional = 0

[[command.sub]]
name = "-printcert"
standalone = ["--help", "-h", "-rfc", "-v"]
valued = ["-file", "-jarfile"]
max_positional = 0
