keytool usability is substandard:

 . -printcert documents that it supports a -v option, but -v does not actually do anything.

 . -genkey and -certreq use defaults for algorithm, key length, validity, etc. when those are not explicitly specified via options. They should inform the user about the values they have chosen.

 . there is no way to obtain the key type or key length of an entry or certificate.

 . with -list -v, if the password is not entered by the user there should be a warning explainin why key entries details are not listed.

 . 'keytool -help" does not print help but just a long list of valid commandline options without saying anything more about what they do.

 . if invalid option combinations are specified, an instructive error message is printed, following but some 100 lines of keytool usage output. This will often cause the user to miss the error message.

 . the -identitydb command is obsolete and should be deemphasized instead of cluttering "keytool -help" output.

 . the -selfcert and -keyclone commands do not serve any useful purpose (that I can imagine) and should be deemphasized instead of cluttering "keytool -help" output.

most of the requests are fixed as a part of 6251120: enhancements for keytool
###@###.### 2005-05-19 02:39:19 GMT