[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Java keytool Import the Certificate as a Trusted Certificate and IBM KeyMan



 
    
$ /cygdrive/c/Program\ Files/Java/jdk1.5.0_07/bin/keytool.exe -import -keystore edgedemo.keystore -storepass edgedemo -alias edgedemo -file edgedemo.pem
Owner: CN=EIS demo certificate (no passphrase on private key), OU=ITSB EDGE, O=Australian Securities & Investments Commission, L=Sydney, ST=NSW, C=AU
Issuer: EMAILADDRESS=edge@xxxxxxxxxxx, CN=EDGE Test Certificate CA, OU=ITSB EDGE, O=Australian Securities & Investments Commission, L=Sydney, ST=NSW, C=AU
Serial number: 2
Valid from: Fri Oct 02 08:09:34 EST 1998 until: Sat Oct 02 08:09:34 EST 1999
Certificate fingerprints:
         MD5:  9F:C5:D6:4A:1E:26:2C:DD:A6:97:77:E2:FD:B3:1C:23
         SHA1: 27:9C:15:24:B8:FF:9A:A0:25:3D:79:06:F5:50:05:6C:D8:B0:7E:B2
Trust this certificate? [no]:  yes
Certificate was added to keystore

$ /cygdrive/c/Program\ Files/Java/jdk1.5.0_07/bin/keytool.exe -list -alias edgedemo -keystore edgedemo.keystore -storepass edgedemo -v
Alias name: edgedemo
Creation date: Jun 1, 2006
Entry type: trustedCertEntry

Owner: CN=EIS demo certificate (no passphrase on private key), OU=ITSB EDGE, O=Australian Securities & Investments Commission, L=Sydney, ST=NSW, C=AU
Issuer: EMAILADDRESS=edge@xxxxxxxxxxx, CN=EDGE Test Certificate CA, OU=ITSB EDGE, O=Australian Securities & Investments Commission, L=Sydney, ST=NSW, C=AU
Serial number: 2
Valid from: Fri Oct 02 08:09:34 EST 1998 until: Sat Oct 02 08:09:34 EST 1999
Certificate fingerprints:
         MD5:  9F:C5:D6:4A:1E:26:2C:DD:A6:97:77:E2:FD:B3:1C:23
         SHA1: 27:9C:15:24:B8:FF:9A:A0:25:3D:79:06:F5:50:05:6C:D8:B0:7E:B2

$ /cygdrive/c/Program\ Files/Java/jdk1.5.0_07/bin/keytool.exe -list -alias edgedemo -keystore edgedemo.keystore -storepass edgedemo -rfc
Alias name: edgedemo
Creation date: Jun 1, 2006
Entry type: trustedCertEntry

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

$ openssl.exe pkcs12 -export -in edgedemo.crt -inkey edgedemo.key -out edgedemo.p12
Enter Export Password:
Verifying - Enter Export Password:

$ /cygdrive/c/Program\ Files/Java/jdk1.5.0_07/bin/keytool.exe -v -list -keystore edgedemo.p12 -storepass edgedemo -storetype pkcs12

Keystore type: pkcs12
Keystore provider: SunJSSE

Your keystore contains 1 entry

Alias name: 1
Creation date: Jun 1, 2006
Entry type: keyEntry
Certificate chain length: 1
Certificate[1]:
Owner: CN=EIS demo certificate (no passphrase on private key), OU=ITSB EDGE, O=Australian Securities & Investments Commission, L=Sydney, ST=NSW, C=AU
Issuer: EMAILADDRESS=edge@xxxxxxxxxxx, CN=EDGE Test Certificate CA, OU=ITSB EDGE, O=Australian Securities & Investments Commission, L=Sydney, ST=NSW, C=AU
Serial number: 2
Valid from: Fri Oct 02 08:09:34 EST 1998 until: Sat Oct 02 08:09:34 EST 1999
Certificate fingerprints:
         MD5:  9F:C5:D6:4A:1E:26:2C:DD:A6:97:77:E2:FD:B3:1C:23
         SHA1: 27:9C:15:24:B8:FF:9A:A0:25:3D:79:06:F5:50:05:6C:D8:B0:7E:B2

Also I can use IBM KeyMan to import and save pkcs12 format as jks (Keystore type):

$ /cygdrive/c/Program\ Files/Java/jdk1.5.0_07/bin/keytool.exe -v -list -keystore edgedemo.keystore -storepass edgedemo

Keystore type: jks
Keystore provider: SUN

Your keystore contains 1 entry

Alias name: edgedemo
Creation date: Jun 1, 2006
Entry type: keyEntry
Certificate chain length: 1
Certificate[1]:
Owner: CN=EIS demo certificate (no passphrase on private key), OU=ITSB EDGE, O=Australian Securities & Investments Commission, L=Sydney, ST=NSW, C=AU
Issuer: EMAILADDRESS=edge@xxxxxxxxxxx, CN=EDGE Test Certificate CA, OU=ITSB EDGE, O=Australian Securities & Investments Commission, L=Sydney, ST=NSW, C=AU
Serial number: 2
Valid from: Fri Oct 02 08:09:34 EST 1998 until: Sat Oct 02 08:09:34 EST 1999
Certificate fingerprints:
         MD5:  9F:C5:D6:4A:1E:26:2C:DD:A6:97:77:E2:FD:B3:1C:23
         SHA1: 27:9C:15:24:B8:FF:9A:A0:25:3D:79:06:F5:50:05:6C:D8:B0:7E:B2



-- 
Terrence Miao                       
Independent IT Consultant                              ...   __o         
Intelligent Business Solutions & Services Pty. Ltd.  ...    -\<,  
URL: http://www.terrencemiao.com/                     ... (_)/(_) ..

Google