Path: csiph.com!x330-a1.tempe.blueboxinc.net!feeder1.hal-mli.net!news.glorb.com!news-out.readnews.com!news-xxxfer.readnews.com!news-out.news.tds.net!newsreading01.news.tds.net!86597e80!not-for-mail
From: "howdyraju2" <howdyraju2@THRWHITE.remove-dii-this>
Subject: Re: Using PKCS#7 as a pro
Message-ID: <6da375bd-e4a0-42e6-938e-c3b4e0b82209@a1g2000hsb.googlegroups.com>
X-Comment-To: comp.lang.java.security
Newsgroups: comp.lang.java.security
In-Reply-To: <a7375f37-8b5a-497f-903b-9fe37dd5ba2d@b64g200
References: <a7375f37-8b5a-497f-903b-9fe37dd5ba2d@b64g200
Content-Type: text/plain; charset=IBM437
Content-Transfer-Encoding: 8bit
X-Gateway: time.synchro.net [Synchronet 3.15a-Win32 NewsLink 1.92]
Lines: 67
Date: Wed, 27 Apr 2011 16:08:11 GMT
NNTP-Posting-Host: 96.60.20.240
X-Complaints-To: news@tds.net
X-Trace: newsreading01.news.tds.net 1303920491 96.60.20.240 (Wed, 27 Apr 2011 11:08:11 CDT)
NNTP-Posting-Date: Wed, 27 Apr 2011 11:08:11 CDT
Organization: TDS.net
Xref: x330-a1.tempe.blueboxinc.net comp.lang.java.security:104

  To: comp.lang.java.security
As mentioned before, since pkcs#7 is not a keystore provider; hence
the JDK keytool command will not be able to parse a pkcs#7 file.
However, you can easily extract the certificate chain
programmatically. See the method below:

private X509Certificate[] getCertificateChain(InputStream in) throws
CertificateException {
	CertificateFactory certFac =3D CertificateFactory.getInstance("X.509");
	CertPath certPath =3D certFac.generateCertPath(in, ENCODING);
	X509Certificate[] chain =3D
(X509Certificate[])certPath.getCertificates().toArray(new
X509Certificate[1]);
	return chain;
}


On Apr 17, 2:49 am, Efi Merdler <foo...@gmail.com> wrote:
> On 17 =D7=90=D7=A4=D7=A8=D7=99=D7=9C, 02:50, Speedo <speedo...@gmail.com> =
wrote:
>
> > pkcs#7 is not a keyStore provider. If you want to read certificate
> > chain in a pkcs#7 file, use "keytool-importcert -file filename".
>
> > To find out all KeyStore providers, write a small program. See
> >    http://exampledepot.com/egs/java.security/ListServices.html
> > Call getCryptoImpls("KeyStore") to find out what's available. For a
> > Sun JDK out of box, there should be al least pkcs12, jks, jceks. You
> > also get the pkcs11 one on Solaris and MSCAPI ones on Windows.
>
> > - Speedo
>
> > On Apr 16, 11:51 pm,EfiMerdler<foo...@gmail.com> wrote:
>
> > > Hi,
> > > I am not able to use pkcs#7 as a provider forkeytool. I want to read
> > > a certificate chain encoded in PKCS#7 format usingkeytool.
>
> > > When running the following command
> > >keytool-import -provider pkcs7 -keystore my_cert.jks -file cert.p7 -
> > > noprompt -storepass my_cert -v
> > > I receivekeytoolerror: java.lang.ClassNotFoundException: pkcs7
> > > even when qualifying the full path I still receive the same error.
>
> > > Where can I find thekeytool'sbuilt in supported providers ?
>
> > > Thanks,
> > >Efi
>
> Thanks.
> It still does not work.
> When using keytool -printcert -file cert.p7 it prints everything fine
> however when trying to import I receive Input not an X.509
> certificate.
>
> I tried to follow thawte tutorial on the subject :https://search.thawte.co=
m/support/ssl-digital-certificates/index?page...
> still no help there.
>
> Any ideas ?
>
> Efi

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24