For Programmers: Free Programming Magazines  


Home > Archive > Java Security > February 2005 > Distribute Keypair









You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

 

Author Distribute Keypair
fritz-bayer@web.de

2005-02-14, 4:03 am

Hi,

I have an application which established a https connection and uses
client side authentification to do so.

Therefore the private and public key as well as the certificate of the
client have to be distributed with the program.

I can't use a .keystore file to distibute them, since it's not portable
across different vendor's jdks. A keystore from vendor A can't be read
by vendor B.

The certificate which contains also the public key can be distributed
in the portable X509 format.

But what format do I use to distribute the private key? Which portable
format can I use?

I thought about a helper program, which extracts the private key and
saves it as a byte sequence in a file usings the keys "getEncoded"
funtion.

My program could then read this byte sequence in to import the key.
However, I'm not sure whether or not this byte sequence is portable
across different vendor's JDKs?

Edward A. Feustel

2005-02-14, 9:00 am


<fritz-bayer@web.de> wrote in message
news:1108364628.080121.55310@o13g2000cwo.googlegroups.com...
> Hi,
>
> I have an application which established a https connection and uses
> client side authentification to do so.
>
> Therefore the private and public key as well as the certificate of the
> client have to be distributed with the program.
>
> I can't use a .keystore file to distibute them, since it's not portable
> across different vendor's jdks. A keystore from vendor A can't be read
> by vendor B.
>
> The certificate which contains also the public key can be distributed
> in the portable X509 format.
>
> But what format do I use to distribute the private key? Which portable
> format can I use?
>
> I thought about a helper program, which extracts the private key and
> saves it as a byte sequence in a file usings the keys "getEncoded"
> funtion.
>
> My program could then read this byte sequence in to import the key.
> However, I'm not sure whether or not this byte sequence is portable
> across different vendor's JDKs?
>
>

Are you trying to send both the public and private key to the same entity?
If so use the .p12 format.

Browsers will read these into their key stores.
Regards,
Ed




----== Posted via Newsfeeds.Com - Unlimited-Uncensored-Secure Usenet News==----
http://www.newsfeeds.com The #1 Newsgroup Service in the World! >100,000 Newsgroups
---= East/West-Coast Server Farms - Total Privacy via Encryption =---
Sponsored Links







Also available: Server administration forum archive | Web Design forum archive | Software forum archive | Hardware reviews archive

Copyright 2008 codecomments.com