Path: csiph.com!usenet.pasdenom.info!weretis.net!feeder4.news.weretis.net!feeder2.ecngs.de!ecngs!feeder.ecngs.de!Xl.tags.giganews.com!border1.nntp.ams.giganews.com!nntp.giganews.com!local2.nntp.ams.giganews.com!nntp.bt.com!news.bt.com.POSTED!not-for-mail NNTP-Posting-Date: Fri, 13 Dec 2013 09:27:30 -0600 Date: Fri, 13 Dec 2013 15:27:26 +0000 From: lipska the kat <"lipskathekat at yahoo dot co dot uk"> Organization: Trollbusters 3 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130308 Thunderbird/17.0.4 MIME-Version: 1.0 Newsgroups: comp.lang.java.programmer Subject: Re: Signing an applet References: <52AB238D.5000800@gmail.com> In-Reply-To: <52AB238D.5000800@gmail.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Message-ID: Lines: 83 X-Usenet-Provider: http://www.giganews.com X-AuthenticatedUsername: NoAuthUser X-Trace: sv3-Mhyrm+uBCep2VPdxFQpFsIfgzPYVypEfNx67ZBoMHpQclFLaHEWc9a8iaGABBmrKgkMSnuyB4v//Ou5!l12RXwknV4DU52P3X4cUrFV16c6Om7r1h2oaltSOuouqvW2xLKFlzRPzpz0UtLMqIo6cBvaYBa1r X-Complaints-To: abuse@btinternet.com X-DMCA-Complaints-To: abuse@btinternet.com X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly X-Postfilter: 1.3.40 X-Original-Bytes: 5135 Xref: csiph.com comp.lang.java.programmer:26878 On 13/12/13 15:11, emf wrote: > On 2013-12-13 08:52 Stefan Ram wrote: >> emf writes: >>> My initial question is: Where do I enter this command? >> >> Into the text command prompt (sometimes called "shell") of >> your operating system. Additional requirements might apply >> such as having a command search path set up properly. This >> is explained in the operating system literature, usually >> separate from Java literature. A manual might already be >> part of your operating system. >> >>> Alternatively, and probably even better, is there a webpage I have >>> missed that provides step by step instructions that an amateur java >>> programmer with my level of ignorance can understand? >> >> Search for tutorials or text books about your operating systems, >> especially text commands and batch files, check out information >> about the search path for commands. Knowledge out this kind >> always comes in handy for both users and programmers. > > Sorry, I did not make myself clear: I am looking for step by step > instructions. I have taken 2 classes on Java programming (and a long > time ago a class on DOS), and I do not intend in the near future to get > more classes. There should be some webpage out there that provides the > information I asked the way I asked. > > emf > From http://www-personal.umich.edu/~lsiden/tutorials/signed-applet/signed-applet.html How To Create a Signed Applet 1. Package the applet into a JAR file. The applet must be in a JAR file before a certificate can be attached to it. Use the jar JDK utility. If the applet was previously referenced with the help of a codebase attribute in tag, replace the codebase attribute with the archive attribute. The value of the archive attribute is a URL of a JAR file. 2. Create a public/private key pair. The command for this is keytool -genkey keytool is another SDK utility. It will prompt you for a password to your keystore and for the remaining parameters, one of which is alias, whose value is the name of the key. The keystore is a file that contains your public/private key-pairs, and the public-keys of others with whom you exchange information. See the documentation in the above link. 3. Create a certificate for the key you created in the previous step. keytool -selfcert Again, keytool will prompt you for a keystore password and remaining parameters. This certificate is now self-signed by you, meaning that it has not been validated by any third party. This is suitable for demo purposes, and may be acceptable to yourself and those who know you because if there is any doubt that the certificate is really yours they can always call you up and ask you for the digest to verify that it is really you and not some impostor that created the certificate. However, if this applet were to be widely distributed, and you wanted it to be accepted by those who do not know you personally, you would certainly want to pay a modest fee to obtain a certificate that is validated by a trusted certificate authority. The procedure for this is straightforward, but beyond the scope of this simple tutorial. 4. Run jarsigner associate this certificate with the JAR file that contains your applet. You will need to give the name of the public key of the certificate you just created. This creates a digest for each file in your JAR and signs them with your private key. These digests or hashes, the public key, and the certificate will all be included in the "WEB-INF" directory of the JAR. Your applet is now signed. -- Lipska the Kat©: Troll hunter, sandbox destroyer, treacherous feline and farscape dreamer of Aeryn Sun GNU/Linux user #560883 - http://www.linuxcounter.net