Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.java.security > #139 > unrolled thread

Loading keystores from a

Back to article view | Back to comp.lang.java.security

Contents

  Loading keystores from a "Thomaspantalacci311" <thomaspantalacci311@THRWHITE.remove-dii-this> - 2011-04-27 16:08 +0000
    Re: Loading keystores fro "Dave Miller" <dave.miller@THRWHITE.remove-dii-this> - 2011-04-27 16:08 +0000
      Re: Loading keystores fro "Thomaspantalacci311" <thomaspantalacci311@THRWHITE.remove-dii-this> - 2011-04-27 16:08 +0000
    Re: Loading keystores fro "Roedy Green" <roedy.green@THRWHITE.remove-dii-this> - 2011-04-27 16:08 +0000

#139 — Loading keystores from a

  To: comp.lang.java.security
Hello.
I want to connect to an Apache server using ssl (so https protocol),
with client certificate in a smartcard. On the website there is an
html page and a java applet. While loading the applet, the client is
required to present his client certificate, though it has been already
loaded when i connect to the server (and so it is on the firefox
keystore), and then the applet is not loaded (classNotFound Exception
is raised).

I think the problem is the client certificate is not found in java
keystore. In the smartcard, I have 2 certificates: one for
authenticate, and the other for sign. How could i proceed to load the
both certificates from the smartcard, using java.security.KeyStore ?
(actually l can load only signature certificate)
Note that i have a pkcs11 provider.

Every idea is welcome to solve my problem

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [next] | [standalone]

#140 — Re: Loading keystores fro

  To: comp.lang.java.security
Thomaspantalacci311@hotmail.com wrote:

<snip>
> While loading the applet, the client is
> required to present his client certificate, though it has been already
I have no idea what you're trying to accomplish here, but...

<snip>
How could i proceed to load the
> both certificates from the smartcard, using java.security.KeyStore ?
> (actually l can load only signature certificate)

To access the client keystore you need access to the client. The user 
(obviously) has access to the keystore - he's sitting in front of the 
console. You could have a html page before the page with the applet with 
instructions on how to load his certificate into his store.



-- 
Dave Miller
Java Web Hosting
http://www.cheap-jsp-hosting.com/

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]

#142 — Re: Loading keystores fro

  To: comp.lang.java.security
I solved my problem. In fact i had to install jss (some dll and a jar
file to place in the current jre) in mozilla firefox. This done, the
JVM can access the firefox keystore and the client authentication is
OK (and so the applet is loaded). I also must check "Use certificates
and keys in browser keystore" in the java control panel->advanced-
>security.

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]

#150 — Re: Loading keystores fro

  To: comp.lang.java.security
On Tue, 29 Jul 2008 06:40:21 -0700 (PDT),
Thomaspantalacci311@hotmail.com wrote, quoted or indirectly quoted
someone who said :

>I think the problem is the client certificate is not found in java
>keystore. In the smartcard, I have 2 certificates: one for
>authenticate, and the other for sign. How could i proceed to load the
>both certificates from the smartcard, using java.security.KeyStore ?
>(actually l can load only signature certificate)
>Note that i have a pkcs11 provider.

First get rid of the complication of the smartcard by copying your
keystore to hard disk.  Then have a read up on keytool for all the
things you can do with it.

see http://mindprod.com/jgloss/keytoolexe.html

Keytool has a big restriction. It will never export a private key. You
have to use the private keys on the certs inside the keystore.

-- 

Roedy Green Canadian Mind Products
The Java Glossary
http://mindprod.com

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [standalone]

Back to top | Article view | comp.lang.java.security

csiph-web