Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.java.security > #150

Re: Loading keystores fro

From "Roedy Green" <roedy.green@THRWHITE.remove-dii-this>
Subject Re: Loading keystores fro
Message-ID <bkab9458mar6htvos4adh0rh473br7jpfa@4ax.com> (permalink)
Newsgroups comp.lang.java.security
References <4885cbea-fff1-46fb-96c2-002b1b2b64f2@p25g2000hsf.googlegroups.com>
Date 2011-04-27 16:08 +0000
Organization TDS.net

Show all headers | View raw


  To: comp.lang.java.security
On Tue, 29 Jul 2008 06:40:21 -0700 (PDT),
Thomaspantalacci311@hotmail.com wrote, quoted or indirectly quoted
someone who said :

>I think the problem is the client certificate is not found in java
>keystore. In the smartcard, I have 2 certificates: one for
>authenticate, and the other for sign. How could i proceed to load the
>both certificates from the smartcard, using java.security.KeyStore ?
>(actually l can load only signature certificate)
>Note that i have a pkcs11 provider.

First get rid of the complication of the smartcard by copying your
keystore to hard disk.  Then have a read up on keytool for all the
things you can do with it.

see http://mindprod.com/jgloss/keytoolexe.html

Keytool has a big restriction. It will never export a private key. You
have to use the private keys on the certs inside the keystore.

-- 

Roedy Green Canadian Mind Products
The Java Glossary
http://mindprod.com

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

Back to comp.lang.java.security | Previous | NextPrevious in thread | Find similar


Thread

Loading keystores from a "Thomaspantalacci311" <thomaspantalacci311@THRWHITE.remove-dii-this> - 2011-04-27 16:08 +0000
  Re: Loading keystores fro "Dave Miller" <dave.miller@THRWHITE.remove-dii-this> - 2011-04-27 16:08 +0000
    Re: Loading keystores fro "Thomaspantalacci311" <thomaspantalacci311@THRWHITE.remove-dii-this> - 2011-04-27 16:08 +0000
  Re: Loading keystores fro "Roedy Green" <roedy.green@THRWHITE.remove-dii-this> - 2011-04-27 16:08 +0000

csiph-web